Lucene search
+L

4335 matches found

CNNVD
CNNVD
added 2024/12/07 12:0 a.m.6 views

WordPress plugin Comfino Payment Gateway 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Comfino Payment Gateway...

6.1CVSS7.6AI score0.00348EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.5 views

WordPress plugin Clickbank 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

6.1CVSS8.3AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.6 views

WordPress plugin Simple User Registration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.1CVSS8AI score0.00441EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.8 views

PT-2024-36083 · Unknown · Urban Base Z-Downloads

Name of the Vulnerable Software and Affected Versions: URBAN BASE Z-Downloads versions 1.11.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...

5.9CVSS5.9AI score0.00258EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.6 views

WordPress plugin XLTab 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS7.9AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/06 12:0 a.m.4 views

WordPress plugin Login With OTP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

8.1CVSS8.5AI score0.00634EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.10 views

PT-2024-35812 · Sonicwall +1 · Sonicwall Sma100 Sslvpn +1

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 SSLVPN versions 10.2.1.13-72sv and earlier Description: A problem in the mod httprp library loaded by the Apache web server allows remote attackers to cause a stack-based buffer overflow, potentially leading to code execution...

8.1CVSS9.9AI score0.12713EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.5 views

WordPress plugin MightyForms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00289EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.5 views

WordPress plugin Additional Custom Order Status for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

6.1CVSS7.7AI score0.00277EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.5 views

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.19.0 and prior versions, which stems from an incorrect assignment of privileg...

8.1CVSS7AI score0.00595EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.9 views

Horilla 代码问题漏洞

Horilla is a free and open source human resources software from Horilla, Inc. A code issue vulnerability exists in Horilla 1.2.1 and prior versions that stems from the presence of a deserialization vulnerability...

8.8CVSS6.6AI score0.00699EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.7 views

Veeam Agent for Windows 安全漏洞

Veeam Agent for Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Windows 6.2 and prior versions 6.X. The vulnerability stems from the presence of a DLL injection vulnerability, which...

7CVSS6.9AI score0.00177EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/12/03 2:5 p.m.5 views

firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs are present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of...

8.8CVSS7.4AI score0.00686EPSS
SaveExploits0References9
OSV
OSV
added 2024/12/03 1:15 p.m.4 views

CVE-2024-9978

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read...

5.5CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/03 12:17 p.m.7 views

WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by luc in WordPress Theme Sweet Date versions = 3.7.3...

9.8CVSS7AI score0.0076EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.4 views

WordPress plugin Google Plus Share and +1 Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.1AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.3 views

WordPress plugin ITERAS 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

7.1CVSS8.2AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/02 12:0 a.m.6 views

WordPress plugin Silverlight Video Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.2AI score0.00177EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/12/02 12:0 a.m.16 views

LimeSurvey < 6.5.12 XSS Vulnerability

LimeSurvey is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.3AI score0.00535EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/30 12:0 a.m.7 views

WordPress plugin Asset CleanUp: Page Speed Booster 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

4.4CVSS8.3AI score0.0027EPSS
SaveExploits0References1
Rows per page
Query Builder