Lucene search
+L

2308 matches found

attackerkb
attackerkb
•added 2023/04/28 2:15 p.m.•11 views

CVE-2023-28473

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

3.3CVSS5.9AI score0.00755EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2023/04/28 11:25 a.m.•17 views

kuwaitjobstoday.com Cross Site Scripting vulnerability OBB-3279050

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•2 views

CVE-2023-28473: Improper Authentication

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

3.3CVSS5.7AI score0.00755EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/04/28 12:00 a.m.•17 views

CVE-2023-28473

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

7.1AI score0.00755EPSS
SaveExploits0References3
Mend
Mend
•added 2023/04/28 12:00 a.m.•1 views

CVE-2023-28473

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

3.3CVSS0.00755EPSS
SaveExploits0References8
CVE
CVE
•added 2023/04/28 12:00 a.m.•72 views

CVE-2023-28473

Concrete CMS (formerly concrete5) versions 8.5.12 and earlier, and 9.0–9.1.3, are vulnerable to an authentication bypass in the jobs section. The issue stems from insufficient authentication checks (Job.php) and has been discussed in multiple advisories. Remediation: upgrade to version 9.2 or lat...

3.3CVSS4.1AI score0.00755EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/04/28 12:00 a.m.•67 views

CVE-2023-28473

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

4.3AI score0.00755EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/28 12:00 a.m.•17 views

CVE-2023-28473

Concrete CMS previously concrete5 versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section...

6.9AI score
SaveExploits0References5
OSV
OSV
•added 2023/04/23 10:15 a.m.•18 views

CVE-2022-44743

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in BlueGlass Jobs for WordPress plugin = 2.5.11.2 versions...

5.4CVSS5.8AI score0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2023/04/23 10:15 a.m.•35 views

CVE-2022-44743

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in BlueGlass Jobs for WordPress plugin = 2.5.11.2 versions...

6.5CVSS5.9AI score0.00386EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/23 10:15 a.m.•25 views

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in BlueGlass Jobs for WordPress plugin = 2.5.11.2 versions...

4.9CVSS5.3AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/04/23 9:59 a.m.•43 views

CVE-2022-44743 WordPress Jobs for WordPress Plugin <= 2.5.11.2 is vulnerable to Cross Site Scripting (XSS)

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in BlueGlass Jobs for WordPress plugin = 2.5.11.2 versions...

6.5CVSS6AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/23 9:59 a.m.•63 views

CVE-2022-44743

The CVE-2022-44743 entry concerns the WordPress plugin Jobs for WordPress (BlueGlass) with authenticated (Contributor+) Stored XSS in versions

6.5CVSS5.4AI score0.00386EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/04/23 12:00 a.m.•17 views

WordPress Plugin Jobs for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. iframe is an inline frame used to embed another document into the current HTML document...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/23 12:00 a.m.•3 views

PT-2023-14547

Name of the Vulnerable Software and Affected Versions BlueGlass Jobs for WordPress plugin versions = 2.5.11.2 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into the website, which can...

6.5CVSS0.00386EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/23 12:00 a.m.•6 views

CVE-2022-44743: Improper Neutralization of Input During Web Page Generation

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in BlueGlass Jobs for WordPress plugin = 2.5.11.2 versions...

6.5CVSS7.8AI score0.00386EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/20 12:00 a.m.•20 views

M-Files 资源管理错误漏洞

M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...

7.5CVSS6.6AI score0.00798EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/04/15 11:15 p.m.•26 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.5CVSS7.1AI score0.00723EPSS
SaveExploits0References2
Prion
Prion
•added 2023/04/15 11:15 p.m.•24 views

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

5CVSS7.4AI score0.00723EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/15 12:00 a.m.•9 views

CVE-2018-15472

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. The diff formatter using rouge can block for a long time in Sidekiq jobs without any timeout...

7.3AI score0.00723EPSS
SaveExploits0References2
Rows per page
Query Builder