Lucene search
+L

29828 matches found

osv_cve
osv_cve
•added 2024/10/29 12:15 p.m.•25 views

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Campus Explorer Campus Explorer Widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through 1.4...

6.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/29 12:15 p.m.•21 views

CVE-2024-49660

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

7.1CVSS0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/29 11:54 a.m.•36 views

CVE-2024-49660 WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

7.1CVSS0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/29 11:54 a.m.•17 views

CVE-2024-49660 WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

7.1CVSS5.9AI score0.00306EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/29 11:54 a.m.•70 views

CVE-2024-49660

CVE-2024-49660 concerns the Campus Explorer Widget (WordPress) with versions 1.4 and earlier. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Public sources in the connected docs confirm the affected software as Campu...

7.1CVSS5.9AI score0.00306EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/29 12:00 a.m.•27 views

PT-2024-33612 · Unknown · Campus Explorer Widget

Name of the Vulnerable Software and Affected Versions: Campus Explorer Widget versions 1.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in the Campus Explorer...

7.1CVSS5.5AI score0.00306EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2024/10/29 12:00 a.m.•28 views

WordPress Code Explorer Plugin <= 1.4.5 is vulnerable to Directory Traversal

Software Code Explorer Type Plugin Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Directory Traversal CVE CVE-2023-5816 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 843977a32054 Credits Dmitrii Ignatyev Required privilege Administrato...

4.9CVSS7.2AI score0.00515EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•15 views

WordPress plugin Campus Explorer Widget has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.1AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•3 views

CVE-2024-49660: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CampusExplorer Campus Explorer Widget campus-explorer-widget allows Reflected XSS.This issue affects Campus Explorer Widget: from n/a through = 1.4...

7.1CVSS5.8AI score0.00306EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/10/25 7:43 p.m.•1 views

appenginetaskutils (>=0.4.3.dev2, <=0.4.3), asc (>=0.1.0, <=0.3.1) +20 more potentially affected by CVE-2024-49766 via werkzeug (0.12.2)

werkzeug PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - appenginetaskutils =0.4.3.dev2, =0.1.0, =1.0.18, =0.1.0, =0.12.0, =2.10.60, =2.0.2, =0.1.0, =0.1.0, =0.5.0 - nailpack-flask 0.1.0 - nails 0.2.0...

6.3CVSS0.00776EPSS
SaveExploits0
Patchstack
Patchstack
•added 2024/10/21 8:30 a.m.•14 views

WordPress Campus Explorer Widget plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Campus Explorer Widget versions = 1.4...

7.1CVSS6.1AI score0.00306EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/21 12:00 a.m.•19 views

WordPress Campus Explorer Widget Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Campus Explorer Widget Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49660 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f8147e5ae215 Credits Mika Required privilege...

7.1CVSS6.5AI score0.00306EPSS
SaveExploits0References1Affected Software1
F5 Networks
F5 Networks
•added 2024/10/16 12:18 a.m.•117 views

K000141459: Angular JS vulnerabilities CVE-2019-14863 and CVE-2022-25869

Security Advisory Description CVE-2019-14863 There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it. CVE-2022-2586...

7.1CVSS7.2AI score0.0768EPSS
SaveExploits1Affected Software12
Tenable Nessus
Tenable Nessus
•added 2024/10/16 12:00 a.m.•34 views

F5 Networks BIG-IP : Angular JS vulnerabilities (K000141459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K000141459 advisory. CVE-2019-14863There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping t...

7.1CVSS6.9AI score0.0768EPSS
SaveExploits1References3
Citrix
Citrix
•added 2024/10/09 12:00 a.m.•28 views

Published applications open through IE instead of Google Chrome

No local app access or URL redirection has been set up on the site. A published application that uses a browser for launching is being accessed through a server Virtual Delivery Agent VDA...

7AI score
SaveExploits0
Krebs on Security
Krebs on Security
•added 2024/10/08 10:21 p.m.•58 views

Patch Tuesday, October 2024 Edition

Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple has addressed a bug in its new...

8.8CVSS6.6AI score0.66695EPSS
SaveExploits0
Microsoft KB
Microsoft KB
•added 2024/10/08 2:00 p.m.•256 views

October 8, 2024—KB5044277 (OS Build 17763.6414) - EXPIRED

None None...

9CVSS6.8AI score0.66695EPSS
SaveExploits2
Microsoft KB
Microsoft KB
•added 2024/10/08 12:00 a.m.•27 views

KB5044272: Cumulative security update for Internet Explorer: October 8, 2024

None None...

6.1AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•19 views

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from the inclusion of an incorrect input validation in the WLAN Explorer...

9.8CVSS6.8AI score0.00595EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2024/09/24 11:59 a.m.•26 views

Security Bulletin: Vulnerabilities in IBM WebSphere Application Server and WebSphere Application Server Liberty affect IBM Watson Explorer (CVE-2024-22354)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty is used by IBM Watson Explorer. IBM Watson Explorer has addressed the applicable CVE CVE-2024-22354. Vulnerability Details CVEID:CVE-2024-22354 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM...

7CVSS7.2AI score0.00649EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder