Lucene search
+L

15830 matches found

Vulnrichment
Vulnrichment
added 2025/02/16 10:17 p.m.7 views

CVE-2025-22290 WordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a throu...

9.3CVSS7.3AI score0.00361EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/16 10:17 p.m.22 views

CVE-2025-22284 WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through ...

7.1CVSS0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/16 12:00 a.m.8 views

WordPress plugin LTL Freight Quotes – Worldwide Express Edition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

7.1CVSS7.7AI score0.00255EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/16 12:00 a.m.11 views

PT-2025-6946 · Unknown · Ltl Freight Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Unishippers Edition versions 2.5.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in LTL Freight Quotes – Unishippers Edition, which allows exploiting incorrectly configured access...

9.8CVSS9.3AI score0.00379EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/16 12:00 a.m.7 views

WordPress plugin LTL Freight Quotes – Unishippers Edition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS7.7AI score0.0026EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/16 12:00 a.m.12 views

PT-2025-6947 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be...

9.3CVSS9.8AI score0.00361EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/02/16 12:00 a.m.7 views

WordPress plugin LTL Freight Quotes – FreightQuote Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin LTL Freigh...

9.3CVSS8.8AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/15 12:00 a.m.10 views

WordPress plugin LTL Freight Quotes – Estes Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS8AI score0.01146EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2025/02/15 12:00 a.m.13 views

PT-2025-6552 · WordPress · Ltl Freight Quotes – Estes Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Estes Edition plugin for WordPress versions up to, and including, 3.3.7 Description: The issue allows unauthenticated attackers to perform SQL Injection via the dropship edit id and edit id parameters due to insufficient...

7.5CVSS10AI score0.01146EPSS
SaveExploits3References10
Patchstack
Patchstack
added 2025/02/14 10:44 p.m.14 views

WordPress LTL Freight Quotes – Estes Edition plugin <= 3.3.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Estes Edition versions = 3.3.7...

7.5CVSS8.1AI score0.01146EPSS
SaveExploits3References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/13 11:10 p.m.28 views

CVE-2024-35475

A Cross-Site Request Forgery CSRF vulnerability was discovered in OpenKM Community Edition on or before version 6.3.12. The vulnerability exists in /admin/DatabaseQuery, which allows an attacker to manipulate a victim with administrative privileges to execute arbitrary SQL commands...

6.4CVSS8.1AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
added 2025/02/13 9:15 a.m.7 views

UBUNTU-CVE-2024-3303

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection...

6.4CVSS5.8AI score0.00396EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2025/02/13 9:15 a.m.13 views

CVE-2024-3303

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection...

6.4CVSS5.9AI score0.00396EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.14 views

GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition that stems from a prompt injection leading to private content disclosure...

6.4CVSS6.7AI score0.00396EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.11 views

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

6.6CVSS6.5AI score0.00444EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.12 views

GitLab Enterprise Edition和GitLab Community Edition 代码问题漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A code issue exists in GitLab Enterprise Edition EE and GitLab Community Edition CE,...

5.3CVSS6.7AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.12 views

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

9.6CVSS8.6AI score0.00441EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/12 4:15 p.m.14 views

UBUNTU-CVE-2025-0516

Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...

4.3CVSS5.8AI score0.00297EPSS
SaveExploits1References4
OSV
OSV
added 2025/02/12 4:15 p.m.13 views

UBUNTU-CVE-2024-9870

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

8.8CVSS5.8AI score0.00393EPSS
SaveExploits1References4
OSV
OSV
added 2025/02/12 3:15 p.m.17 views

UBUNTU-CVE-2025-1042

An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits0References4
Rows per page
Query Builder