Lucene search
+L

5791 matches found

CNNVD
CNNVD
added 2025/01/22 12:00 a.m.11 views

WordPress plugin History timeline 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.10 views

PT-2025-1613

Name of the Vulnerable Software and Affected Versions Arm Cortex-A72 versions prior to r1p0 Arm Cortex-A73 affected versions not specified Arm Cortex-A75 affected versions not specified Description The issue may allow an adversary to gain a weak form of control over the victim's branch history...

5.1CVSS6.5AI score0.00168EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.6 views

ARM Cortex-A72、Cortex-A73和Cortex-A75 安全漏洞

The ARM Cortex-A72 and others are products of ARM UK.The ARM Cortex-A72 is an efficient, high-performance processor that implements the Armv8-A architecture.The ARM Cortex-A73 is an efficient, high-performance processor.The ARM Cortex-A75 is a high-performance application CPU that delivers high...

5.1CVSS6.4AI score0.00168EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/21 4:15 p.m.8 views

CVE-2024-56990

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /view-medhistory.php and /admin/view-patient.php...

4.5CVSS5.8AI score0.00402EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.11 views

PT-2025-3373 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns Cross Site Scripting XSS in specific API endpoints, namely "/view-medhistory.php" and "/admin/view-patient.php". This allows for potential malicious script...

4.5CVSS5.7AI score0.00402EPSS
SaveExploits1References4
OSV
OSV
added 2025/01/20 7:34 a.m.6 views

MAL-2025-205 Malicious code in markets-history-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb43cd274b13e9601b8d4fa5c53f260feb6f9a2d4fde9e60c555c520153bd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/20 7:34 a.m.7 views

Malicious code in markets-history-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb43cd274b13e9601b8d4fa5c53f260feb6f9a2d4fde9e60c555c520153bd6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
NVD
NVD
added 2025/01/20 3:15 a.m.32 views

CVE-2025-0581

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the...

5.4CVSS0.00466EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/01/20 3:00 a.m.12 views

CVE-2025-0581 CampCodes School Management Software Chat History send cross site scripting

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the...

5.3CVSS6.2AI score0.00466EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/20 3:00 a.m.56 views

CVE-2025-0581

CVE-2025-0581 affects CampCodes School Management Software v1.0, specifically the /chat/group/send endpoint in the Chat History component. The root cause is manipulation of the message parameter enabling cross-site scripting (XSS), with remote exploitation and a publicly disclosed exploit. Severa...

5.4CVSS3.7AI score0.00466EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/01/20 3:00 a.m.41 views

CVE-2025-0581 CampCodes School Management Software Chat History send cross site scripting

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an unknown part of the file /chat/group/send of the component Chat History. The manipulation of the argument message leads to cross site scripting. It is possible to initiate the...

5.3CVSS0.00466EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.12 views

The vulnerability of the Wiki History Diff component of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Wiki History Diff component in the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

3.1CVSS5.5AI score0.00445EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/19 12:00 a.m.14 views

PT-2025-3972 · Unknown · Campcodes School Management

Name of the Vulnerable Software and Affected Versions: CampCodes School Management Software version 1.0 Description: A problematic issue has been found in the Chat History component of the software, specifically affecting an unknown part of the file /chat/group/send. The manipulation of the messa...

5.4CVSS4.3AI score0.00466EPSS
SaveExploits1References12
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.9 views

WordPress History timeline plugin <= 0.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin History timeline versions = 0.7.2...

7.1CVSS6.1AI score0.00393EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/01/16 6:15 p.m.7 views

CVE-2024-57775

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid...

8.8CVSS5.8AI score0.0059EPSS
SaveExploits1References1
Schneier on Security
Schneier on Security
added 2025/01/14 12:00 p.m.11 views

The First Password on the Internet

It was created in 1973 by Peter Kirstein: So from the beginning I put password protection on my gateway. This had been done in such a way that even if UK users telephoned directly into the communications computer provided by Darpa in UCL, they would require a password. In fact this was the first...

7.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/01/14 8:00 a.m.88 views

January 14, 2025—KB5050013 (OS Build 10240.20890) - EXPIRED

None None...

9.8CVSS6.8AI score0.80912EPSS
SaveExploits8
SUSE CVE
SUSE CVE
added 2025/01/10 12:19 a.m.8 views

SUSE CVE-2025-21609

SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary file deletion vulnerability. The vulnerability exists in the POST /api/history/getDocHistoryContent endpoint. An attacker can craft a payload to exploit this vulnerability,...

9.1CVSS7AI score0.00601EPSS
SaveExploits1References4
Circl
Circl
added 2025/01/09 8:16 p.m.8 views

CVE-2024-13284

creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiokhsx22e 2025-01-09 20:17:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1061 2025-01-09 21:57:40+00:00| seen| https://t.me/cvedetector/14916...

8.8CVSS7.6AI score0.00196EPSS
SaveExploits0References4
NVD
NVD
added 2025/01/09 4:16 p.m.14 views

CVE-2025-22510

Deserialization of Untrusted Data vulnerability in kkarpieszuk WC Price History for Omnibus wc-price-history allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through = 2.1.4...

7.2CVSS0.01225EPSS
SaveExploits1References1
Rows per page
Query Builder