Lucene search
+L

4683 matches found

CVE
CVE
•added 2025/01/16 8:07 p.m.•60 views

CVE-2025-23828

CVE-2025-23828 — Stored XSS in WordPress Data Guard (OriginalTips.com WordPress Data Guard): Improper neutralization of input during web page generation leading to cross-site scripting. Affected: WordPress Data Guard, from n/a through 8. CVSS v3.1 base score 7.1 (HIGH). Exact exploit details, vul...

7.1CVSS7.2AI score0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•33 views

CVE-2025-23828 WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS0.00334EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•16 views

WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WordPress Data Guard versions = 8...

7.1CVSS6.2AI score0.00334EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•5 views

PT-2025-5126

Name of the Vulnerable Software and Affected Versions WordPress Data Guard versions prior to 8 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious script...

7.1CVSS0.00334EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•15 views

WordPress plugin WordPress Data Guard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin A cross-si...

7.1CVSS7.7AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•4 views

CVE-2025-23828: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS5.8AI score0.00334EPSS
SaveExploits0References1
osv-azl
osv-azl
•added 2025/01/15 1:15 p.m.•16 views

AZL-55832 CVE-2024-57801 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

7.8CVSS6.7AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/13 12:00 a.m.•31 views

PT-2025-5628 · Intel · Intel Sgx

Name of the Vulnerable Software and Affected Versions: Intel SGX affected versions not specified Description: The issue is a side-channel timing attack against Intel SGX enclaves, which can lead to the complete compromise of Trusted Execution Environment TEE attestation. A proof of concept PoC ha...

8.8CVSS6.9AI score0.00258EPSS
SaveExploits0References6
Packet Storm
Packet Storm
•added 2025/01/12 12:00 a.m.•152 views

CISA: U.S. Coast Guard Cyber Risk Management

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/01/10 12:00 a.m.•15 views

Gramine 安全漏洞

Gramine is an open source Linux multiprocess application library operating system supporting Intel SGX by The Gramine Project. A security vulnerability exists in Gramine, which stems from a mismatch between SW signals and HW anomalies, resulting in an interface vulnerability...

7.5CVSS6.8AI score0.00561EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2026-2881

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SUNRPC component, specifically in the svcauth gss function related to handling zero-length gss token values during the gss read proxy verf...

7.5CVSS6AI score0.00529EPSS
SaveExploits0
osv-debian
osv-debian
•added 2024/12/27 3:15 p.m.•11 views

DEBIAN-CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

5.5CVSS5.7AI score0.00206EPSS
SaveExploits0References1
osv-debian
osv-debian
•added 2024/12/27 2:15 p.m.•6 views

DEBIAN-CVE-2024-53179

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses-authkey.response with SMB2.1 + sign mounts which occurs due to following race: task A task B cifsmount dfsmountshare getsession...

7.8CVSS6.2AI score0.00604EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•12 views

CVE-2023-32574

Missing Authorization vulnerability in Fahad Mahmood Injection Guard injection-guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through = 1.2.1...

4.3CVSS5.8AI score0.00415EPSS
SaveExploits0References3
NVD
NVD
•added 2024/12/13 3:15 p.m.•20 views

CVE-2023-32574

Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1...

4.3CVSS0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•29 views

CVE-2023-32574 WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1...

4.3CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:23 p.m.•53 views

CVE-2023-32574

CVE-2023-32574 is a missing authorization / broken access control vulnerability in the WordPress plugin Injection Guard (versions

4.3CVSS8.6AI score0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:23 p.m.•11 views

CVE-2023-32574 WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Injection Guard injection-guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through = 1.2.1...

4.3CVSS8.3AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•5 views

CVE-2023-32574: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1...

4.3CVSS5.9AI score0.00415EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•15 views

WordPress plugin Injection Guard 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.8AI score0.00415EPSS
SaveExploits0References1
Rows per page
Query Builder