Lucene search
+L

5464 matches found

wpexploit
wpexploit
added 2022/06/20 12:00 a.m.138 views

WP Duplicate Page < 1.3 - Admin+ Stored Cross Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed. 1. Navigate to Settings -Duplicate Page - Duplicate Page Settings and enter the XSS payload into the...

4.8CVSS0.00565EPSS
SaveExploits2
Patchstack
Patchstack
added 2022/06/20 12:00 a.m.24 views

WordPress WP Duplicate Page plugin <= 1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Sachin Bahl eSec Forte Technologies Pvt Ltd in WordPress WP Duplicate Page plugin versions = 1.2. Solution Update the WordPress WP Duplicate Page plugin to the latest available version at least 1.3...

4.8CVSS1.8AI score0.00565EPSS
SaveExploits2References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/19 10:15 p.m.6 views

CVE-2022-1836

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.8AI score
SaveExploits0References1
CVE
CVE
added 2022/06/19 9:21 p.m.9355 views

CVE-2022-1836

CVE-2022-33981 affects the Linux kernel floppy driver. The issue is a concurrency use-after-free flaw in drivers/block/floppy.c before 5.17.6, triggered by use of raw_cmd after deallocation in raw_cmd_ioctl, leading to potential denial-of-service (kernel crash/memory corruption). Public advisorie...

5.8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/06/15 11:00 p.m.9 views

CVE-2022-20817

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

7.4CVSS7.1AI score0.01148EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/06/15 5:55 p.m.16 views

CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

7.4CVSS6.7AI score0.01148EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/06/15 4:00 p.m.31 views

Cisco IP Phone Duplicate Key Vulnerability

A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...

7.4CVSS1.8AI score0.01148EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/15 12:00 a.m.11 views

Cisco Unified IP Phones 安全特征问题漏洞

Cisco Unified IP Phones is a series of IP phones from Cisco, U.S.A. A security feature issue vulnerability exists in Cisco Unified IP Phones, which stems from the failure to properly generate keys during the manufacturing process resulting in the installation of duplicate manufacturing keys on...

7.4CVSS5.7AI score0.01148EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2022/06/14 11:29 a.m.96 views

CVE-2022-1972

CVE-2022-1972 is duplicate of CVE-2022-2078, so please consider CVE-2022-2078 instead. https://access.redhat.com/security/cve/CVE-2022-2078...

5.5CVSS0.3AI score0.01013EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/06/13 4:15 p.m.8 views

CVE-2021-46815

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-46789. Reason: This candidate is a duplicate of CVE-2021-46789. Notes: All CVE users should reference CVE-2021-46789 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

7.2AI score
SaveExploits0References2
CVE
CVE
added 2022/06/13 3:07 p.m.84 views

CVE-2021-46815

CVE-2021-46815 is rejected/not used; reference CVE-2021-46789 instead.

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/06/07 12:27 a.m.100 views

CVE-2022-1966

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate...

7.8CVSS6.7AI score0.02914EPSS
SaveExploits7References3
ATTACKERKB
ATTACKERKB
added 2022/06/06 6:15 p.m.8 views

CVE-2022-1966

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

6.8AI score
SaveExploits5References7
CVE
CVE
added 2022/06/06 6:01 p.m.678 views

CVE-2022-1966

CVE-2022-1966 is a Linux kernel use-after-free in net/netfilter/nf_tables_api.c (NFT_STATEFUL_EXPR check) that can enable local privilege escalation to root. Public advisories (Amazon Linux 2, ALAS, Red Hat/CentOS references) cite this vulnerability and recommend updating the kernel packages or a...

6.8AI score
SaveExploits5
UbuntuCve
UbuntuCve
added 2022/06/03 12:00 a.m.9 views

CVE-2022-1966

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.8AI score
SaveExploits5References10
OSV
OSV
added 2022/06/03 12:00 a.m.10 views

UBUNTU-CVE-2022-1966

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.7AI score
SaveExploits5References11
OSV
OSV
added 2022/06/02 12:00 a.m.9 views

UBUNTU-CVE-2022-1972

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to...

6.8AI score
SaveExploits1References8
GithubExploit
GithubExploit
added 2022/05/31 3:00 a.m.641 views

Exploit for SQL Injection in Duplicate_Post_Project Duplicate_Post

It is an offensive tool for Windows. The repository contains a P...

9CVSS9AI score0.09509EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2022/05/26 7:00 a.m.7 views

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.

...

9.1CVSS6.6AI score0.02724EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2022/05/25 12:00 a.m.6 views

CVE-2022-1836

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed t...

6.8AI score
SaveExploits0References5
Rows per page
Query Builder