Lucene search
K

2159 matches found

Snyk
Snyk
added 2023/12/11 12:0 p.m.1 views

Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

9.8CVSS6.4AI score0.02983EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2023/12/11 7:0 a.m.3 views

schrockinteractive.com Improper Access Control vulnerability OBB-3809799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
Exploits0
CNNVD
CNNVD
added 2023/12/04 12:0 a.m.3 views

WordPress plugin Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin Interactive Contact Fo...

6.5CVSS6.5AI score0.0027EPSS
Exploits2References1
OSV
OSV
added 2023/11/22 10:15 p.m.2 views

CVE-2023-47767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

6.1CVSS7.3AI score0.00412EPSS
Exploits0References1
NVD
NVD
added 2023/11/22 10:15 p.m.10 views

CVE-2023-47767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

7.1CVSS0.00412EPSS
Exploits0References1
Prion
Prion
added 2023/11/22 10:15 p.m.17 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

5.8CVSS7.1AI score0.00412EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 9:59 p.m.14 views

CVE-2023-47767 WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fla-shop.Com Interactive World Map plugin = 3.2.0 versions...

7.1CVSS7.1AI score0.00412EPSS
Exploits0References1
CVE
CVE
added 2023/11/22 9:59 p.m.68 views

CVE-2023-47767

CVE-2023-47767 affects the WordPress plugin Fla-shop.Com Interactive World Map (versions = 3.4.4 to resolve the vulnerability; if immediate upgrade is not possible, apply any vendor-reported mitigation. This CVE is publicly listed with severity around medium-to-high depending on scoring source, a...

7.1CVSS6.6AI score0.00412EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.4 views

PT-2023-30596 · WordPress · Fla-Shop.Com Interactive World Map

Name of the Vulnerable Software and Affected Versions: Fla-shop.Com Interactive World Map plugin versions prior to 3.2.0 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions prior to...

7.1CVSS6.7AI score0.00412EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.5 views

WordPress Plugin Interactive World Map Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS5.8AI score0.00412EPSS
Exploits0References2
OSV
OSV
added 2023/11/14 12:15 a.m.1 views

CVE-2023-47680

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...

5.4CVSS5.8AI score0.00409EPSS
Exploits0References1
NVD
NVD
added 2023/11/14 12:15 a.m.19 views

CVE-2023-47680

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...

6.5CVSS0.00409EPSS
Exploits0References1
Prion
Prion
added 2023/11/14 12:15 a.m.21 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Qode Interactive Qi Addons For Elementor plugin = 1.6.3 versions...

4.9CVSS5.8AI score0.00409EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/14 12:0 a.m.11 views

WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

Software Interactive World Map Type Plugin Vulnerable versions = 3.2.0 Fixed in 3.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47767 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 246d6d2a2061 Credits Le Ngoc Anh...

7.1CVSS5.6AI score0.00412EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/14 12:0 a.m.37 views

ALSA-2023:7024 Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

9.8CVSS8.9AI score0.27095EPSS
Exploits3References6
CVE
CVE
added 2023/11/13 11:13 p.m.54 views

CVE-2023-47680

CVE-2023-47680 affects the WordPress plugin Qi Addons For Elementor by Qode Interactive, with a Stored XSS in versions &lt;= 1.6.3 when exploited by users with contributor privileges. The issue stems from insufficient validation/escaping of parameters in the contributor+ workflow. Patchstack indi...

6.5CVSS5.3AI score0.00409EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2023/11/09 12:0 a.m.9 views

WordPress Qi Addons For Elementor Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47680 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID dee29da77c21 Credits Rafie Muhammad...

6.5CVSS5.8AI score0.00409EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/08 7:15 p.m.2 views

CVE-2023-47223

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Map Plugins Basic Interactive World Map plugin = 2.0 versions...

4.8CVSS7.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/08 7:15 p.m.4 views

CVE-2023-47223

A vulnerability in WP Map Plugins Basic Interactive World Map basic-interactive-world-map.This issue affects Basic Interactive World Map: from n/a through = 2.0...

5.9CVSS6.5AI score0.00397EPSS
Exploits0References3
NVD
NVD
added 2023/11/08 7:15 p.m.23 views

CVE-2023-47223

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP Map Plugins Basic Interactive World Map plugin = 2.0 versions...

5.9CVSS0.00397EPSS
Exploits0References1
Rows per page
Query Builder