Lucene search
+L

1156 matches found

Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•7 views

CVE-2025-23847 WordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in saill Site Launcher site-launcher allows Reflected XSS.This issue affects Site Launcher: from n/a through = 0.9.4...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•65 views

CVE-2025-23847

CVE-2025-23847 concerns the WordPress Site Launcher plugin (versions up to 0.9.4) where a Reflected XSS flaw arises from improper input neutralization during web page generation . This affects the Site Launcher plugin on WordPress sites and can reflect user-supplied input in a page, enabling pote...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•2 views

CVE-2025-23847: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in saill Site Launcher site-launcher allows Reflected XSS.This issue affects Site Launcher: from n/a through = 0.9.4...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•13 views

WordPress plugin Site Launcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.9AI score0.00393EPSS
SaveExploits0References2
OSV
OSV
•added 2025/02/03 9:01 a.m.•8 views

MAL-2025-1060 Malicious code in alpha-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813103e220bbdc9611499386ec8ea80516980d09eeca43e74370925dc5f3a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 9:01 a.m.•10 views

Malicious code in alpha-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813103e220bbdc9611499386ec8ea80516980d09eeca43e74370925dc5f3a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
•added 2025/01/19 8:15 a.m.•17 views

CVE-2025-0567

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS0.00196EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/01/19 7:31 a.m.•8 views

CVE-2025-0567 Epic Games Launcher Installer profapi.dll untrusted search path

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS7.2AI score0.00196EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/01/19 7:31 a.m.•33 views

CVE-2025-0567 Epic Games Launcher Installer profapi.dll untrusted search path

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS0.00196EPSS
SaveExploits0References3
CVE
CVE
•added 2025/01/19 7:31 a.m.•73 views

CVE-2025-0567

CVE-2025-0567 affects Epic Games Launcher (versions up to 17.2.1). The issue is in the profapi.dll library in the Installer component, causing an untrusted search path. Local attack is required, with high attack complexity and low overall impact (confidentiality/integrity/availability). The CVSS ...

4.5CVSS4.8AI score0.00196EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/19 12:00 a.m.•2 views

CVE-2025-0567: Untrusted Search Path

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...

4.5CVSS5AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/19 12:00 a.m.•12 views

Epic Games Launcher 代码问题漏洞

Epic Games Launcher is a game software launcher from Epic Games USA. A code issue vulnerability exists in Epic Games Launcher version 17.2.1 and earlier, which stems from code in the profapi.dll library in the component Installer that can lead to untrusted search paths...

4.5CVSS5.1AI score0.00196EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/19 12:00 a.m.•27 views

PT-2025-3959 · Epic Games · Epic Games Launcher

Name of the Vulnerable Software and Affected Versions: Epic Games Launcher versions up to 17.2.1 Description: A vulnerability was found in the Epic Games Launcher, affecting the library profapi.dll of the component Installer. The issue leads to an untrusted search path. Local attack is required,...

4.5CVSS6.9AI score0.00196EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•11 views

WordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Site Launcher versions = 0.9.4...

7.1CVSS6.1AI score0.00393EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/12/12 1:40 a.m.•16 views

CVE-2024-11872

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS6.2AI score0.00197EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/12 1:40 a.m.•50 views

CVE-2024-11872

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

Epic Games Launcher 安全漏洞

Epic Games Launcher is a game software launcher from Epic Games USA. A security vulnerability exists in Epic Games Launcher that stems from an incorrect default privilege local elevation of privilege that allows a local attacker to elevate the privileges of an affected Epic Games Launcher...

7.8CVSS7.6AI score0.00197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-11872: Incorrect Default Permissions

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS6.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/11 9:55 p.m.•89 views

CVE-2024-11872

CVE-2024-11872 : Epic Games Launcher contains an incorrect default permission issue in its product installer, enabling a local attacker with low privileges to escalate to SYSTEM by exploiting mis‑configured permissions on a sensitive folder. Existence and impact are supported by the ZDI advisory ...

7.8CVSS7.8AI score0.00197EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/11 9:55 p.m.•27 views

CVE-2024-11872 Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References2
Rows per page
Query Builder