Lucene search
+L

1193 matches found

Tenable Nessus
Tenable Nessus
added 2022/10/06 12:0 a.m.36 views

Oracle Linux 8 : prometheus-jmx-exporter (ELSA-2022-6820)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6820 advisory. 0.12.0-8 - Bump snakeyaml version to 1.32 to collect fix for CVE-2022-25857 BZ 2128477 Tenable has extracted the preceding description block directly from the...

7.5CVSS6.7AI score0.02191EPSS
SaveExploits2References2
OSV
OSV
added 2022/09/26 10:34 a.m.7 views

SUSE-SU-2022:3382-1 Security update for permissions

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths bsc1203018. - Add capability for prometheus-blackboxexporter bsc1191194. - Make btmp root:utmp bsc1050467...

4.4CVSS4.7AI score0.00143EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/06 6:15 p.m.28 views

CVE-2022-3026

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that...

8.8CVSS0.01116EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/06 6:15 p.m.5 views

CVE-2022-3026

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that...

8.8CVSS7.7AI score0.01116EPSS
SaveExploits1References4
Prion
Prion
added 2022/09/06 6:15 p.m.20 views

Input validation

The WP Users Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.4.2 via the 'Export Users' functionality. This makes it possible for authenticated attackers, such as a subscriber, to add untrusted input into profile information like First Names that...

6.8CVSS8.6AI score0.01116EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/09/06 5:19 p.m.55 views

CVE-2022-3026

The WP Users Exporter plugin for WordPress (versions up to and including 1.4.2) is vulnerable to CSV Injection via the Export Users feature. An authenticated attacker (e.g., a subscriber) can inject untrusted data into profile fields (e.g., First Names) that are embedded in the CSV exported by an...

8.8CVSS8.5AI score0.01116EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.7 views

WordPress plugin WP Users Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.4AI score0.01116EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2022/08/29 12:0 a.m.24 views

WordPress WP Users Exporter plugin <= 1.4.2 - CSV Injection vulnerability

CSV Injection vulnerability discovered by Zhouyuan Yang in WordPress WP Users Exporter plugin versions = 1.4.2. Solution Deactivate and delete. This plugin has been closed as of January 8, 2020 and is not available for download. Reason: Security Issue...

8.8CVSS2.9AI score0.01116EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2022/07/31 12:0 a.m.12 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2022/07/30 2:0 a.m.18 views

[SECURITY] Fedora 36 Update: golang-github-prometheus-node-exporter-1.3.1-10.fc36

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

7.4AI score
SaveExploits0
OSV
OSV
added 2022/07/22 1:15 p.m.4 views

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

6.1CVSS5.8AI score0.00592EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/22 1:15 p.m.4 views

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

6.1CVSS5.8AI score0.00592EPSS
SaveExploits1References3
NVD
NVD
added 2022/07/22 1:15 p.m.10 views

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

6.1CVSS0.00592EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/22 1:15 p.m.15 views

Cross site scripting

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

5.8CVSS5.8AI score0.00592EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/22 12:36 p.m.17 views

CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page...

6AI score0.00592EPSS
SaveExploits1References2
CVE
CVE
added 2022/07/22 12:36 p.m.63 views

CVE-2022-36131

The CVE-2022-36131 entry concerns the Better PDF Exporter add-on for Atlassian Jira (version 10.0.0). Affected component: PDF Templates overview page description storage. Root cause: stored cross-site scripting (XSS) via a crafted description can be injected and rendered. Reported impact indicate...

6.1CVSS5.8AI score0.00592EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/07/22 12:0 a.m.4 views

Atlassian Jira 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Better PDF Exporter add-on version 10.0.0, which originates from a customized...

6.1CVSS5.9AI score0.00592EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.20 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.13 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.26 views

[SECURITY] Fedora 36 Update: golang-github-prometheus-node-exporter-1.3.1-9.fc36

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4
Rows per page
Query Builder