Lucene search
+L

9658 matches found

BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•25 views

Fastify JavaScript saveRequestFiles DoS

The vulnerability of the saveRequestFiles function in the Fastify JavaScript software framework is related to the use of incorrect authentication tokens due to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending special...

7.8CVSS5.5AI score0.00578EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/24 12:00 a.m.•17 views

Web Runtime SEC DoS

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS7.7AI score0.00686EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•22 views

IBM WebSphere Liberty Profile DoS

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause...

7.8CVSS5.4AI score0.00628EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•15 views

Oracle MySQL Server Parser DoS

The vulnerability of the Oracle MySQL Server component of the database management system involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS7AI score0.0104EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2025/01/22 3:15 p.m.•25 views

CVE-2025-23812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows Reflected XSS.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.1CVSS0.003EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/22 3:15 p.m.•15 views

CVE-2025-23784

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows SQL Injection.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.6CVSS0.00453EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:32 p.m.•15 views

CVE-2025-23812 WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows Reflected XSS.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.1CVSS7.2AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:32 p.m.•39 views

CVE-2025-23812 WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows Reflected XSS.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.1CVSS0.003EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/22 2:32 p.m.•80 views

CVE-2025-23812

CVE-2025-23812 : Reflected Cross-Site Scripting in the NotFound Contact Form 7 Round Robin Lead Distribution plugin. Affected: Contact Form 7 Round Robin Lead Distribution from n/a up to version 1.2.1. CVSS v3.1 base score 7.1 (HIGH). Attack vector: NETWORK; Impact: Confidentiality, Integrity, an...

7.1CVSS7.2AI score0.003EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•6 views

CVE-2025-23784 WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows SQL Injection.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.6CVSS7.3AI score0.00453EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•3 views

PT-2025-5112

Name of the Vulnerable Software and Affected Versions Contact Form 7 Round Robin Lead Distribution versions 1.2.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables an attacker ...

7.1CVSS0.003EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•6 views

PT-2025-5089

Name of the Vulnerable Software and Affected Versions Contact Form 7 Round Robin Lead Distribution versions 1.2.1 and earlier Description The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This can be exploited through the NotFound...

7.6CVSS0.00453EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•27 views

WordPress plugin Contact Form 7 Round Robin Lead Distribution Cross-site scripting vulnerabilities

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin...

7.1CVSS7.7AI score0.003EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•14 views

WordPress plugin Contact Form 7: Round Robin lead distribution; SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Contact Form 7 Round Robin Lead...

7.6CVSS8.7AI score0.00453EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•5 views

CVE-2025-23812: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows Reflected XSS.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.1CVSS5.8AI score0.003EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•8 views

CVE-2025-23784: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in David Jeffrey Contact Form 7 Round Robin Lead Distribution contact-form-7-round-robin-lead-distribution allows SQL Injection.This issue affects Contact Form 7 Round Robin Lead Distribution: from n/...

7.6CVSS5.8AI score0.00453EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/21 12:00 a.m.•24 views

Next.js DoS

The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.9AI score0.00802EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•20 views

WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Contact Form 7 Round Robin Lead Distribution versions = 1.2.1...

7.1CVSS6.1AI score0.003EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•17 views

WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Contact Form 7 Round Robin Lead Distribution versions = 1.2.1...

7.6CVSS8.1AI score0.00453EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/14 12:00 a.m.•31 views

App Connect Enterprise Certified Container Unlimited Resource Distribution DoS

The vulnerability of the App Connect Enterprise Certified Container management tool is related to the unlimited distribution of resources during the process of writing files to the local file system. Exploiting this vulnerability can allow a attacker to cause service failures...

5.5CVSS5.4AI score0.00161EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder