Lucene search
+L

1728 matches found

Fedora
Fedora
added 2023/04/29 4:42 a.m.35 views

[SECURITY] Fedora 37 Update: rust-askama-0.11.1-4.fc37

Type-safe, compiled Jinja-like templates for Rust...

9.8CVSS8.7AI score0.01268EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/04/28 12:0 a.m.41 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 LTS : Netty vulnerabilities (USN-6049-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6049-1 advisory. It was discovered that Netty's Zlib decoders did not limit memory allocations. A remote attacker could possibly use...

7.5CVSS6.6AI score0.18891EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2023/04/18 12:0 a.m.26 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gradle (SUSE-SU-2023:1867-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1867-1 advisory. - CVE-2021-29428: Fixed a local privilege escalation through system temporary directory. bsc1184807 Tenab...

8.8CVSS7.2AI score0.00534EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/14 11:5 a.m.4 views

OESA-2023-1220 libldb security update

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases. Security Fixes: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain...

7.7CVSS6.6AI score0.00567EPSS
SaveExploits0References2
NVD
NVD
added 2023/04/10 4:15 a.m.25 views

CVE-2014-125097

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS4.5AI score0.00473EPSS
SaveExploits0References3
Prion
Prion
added 2023/04/10 4:15 a.m.14 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

5.8CVSS6.5AI score0.00473EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/04/10 3:0 a.m.72 views

CVE-2014-125097

Affected software: WordPress plugin BestWebSoft Facebook Like Button (versions up to 2.33). Vulnerable component: fcbkbttn_settings_page in facebook-button-plugin.php. Issue: cross‑site scripting vulnerability exploitable remotely. Impact: allows user interaction required; results include potenti...

6.1CVSS4.8AI score0.00473EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/10 3:0 a.m.31 views

CVE-2014-125097 BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

4CVSS6AI score0.00473EPSS
SaveExploits0References3
NVD
NVD
added 2023/04/10 12:15 a.m.22 views

CVE-2012-10012

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

8.8CVSS5.8AI score0.00348EPSS
SaveExploits0References3
Prion
Prion
added 2023/04/10 12:15 a.m.20 views

Cross site request forgery (csrf)

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

6.8CVSS7.1AI score0.00348EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/10 12:0 a.m.22 views

PT-2023-10165 · Bestwebsoft · Bestwebsoft Facebook Like Button

Name of the Vulnerable Software and Affected Versions: BestWebSoft Facebook Like Button versions up to 2.33 Description: A problematic issue was found, affecting the function fcbkbttn settings page of the file facebook-button-plugin.php. This leads to cross-site scripting and can be launched...

6.1CVSS6.5AI score0.00473EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.8 views

WordPress plugin BestWebSoft Facebook Like Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS4.7AI score0.00473EPSS
SaveExploits0References4
CVE
CVE
added 2023/04/09 11:31 p.m.66 views

CVE-2012-10012

CVE-2012-10012 affects BestWebSoft Facebook Like Button (versions up to 2.13). The vulnerability exists in the fcbk_bttn_plgn_settings_page function of facebook-button-plugin.php, enabling cross-site request forgery (CSRF) and can be exploited remotely. A patch is available (commit: 33144ae5a45ed...

8.8CVSS6.5AI score0.00348EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/09 11:31 p.m.31 views

CVE-2012-10012 BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

5CVSS8.8AI score0.00348EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/09 12:0 a.m.11 views

PT-2023-9949 · Bestwebsoft · Bestwebsoft Facebook Like Button

Name of the Vulnerable Software and Affected Versions: BestWebSoft Facebook Like Button versions up to 2.13 Description: A vulnerability has been found in the function fcbk bttn plgn settings page of the file facebook-button-plugin.php, leading to cross-site request forgery. The attack can be...

8.8CVSS7.1AI score0.00348EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/04/09 12:0 a.m.7 views

WordPress Plugin BestWebSoft Facebook Like Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin BestWebSoft Facebook Like...

8.8CVSS5.6AI score0.00348EPSS
SaveExploits0References5
NVD
NVD
added 2023/04/06 6:15 a.m.23 views

CVE-2023-23972

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 6:15 a.m.6 views

CVE-2023-23972

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

4.8CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/06 6:15 a.m.15 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Smplug-in Social Like Box and Page by WpDevArt plugin = 0.8.39 versions...

4.3CVSS4.9AI score0.00392EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/06 5:50 a.m.41 views

CVE-2023-23972

CVE-2023-23972 concerns the WordPress plugin “Social Like Box and Page by WpDevArt” (Smplug-in) up to version 0.8.39. The issue is a stored XSS vulnerability that requires admin+ privileges to exploit. The underlying cause is improper sanitization/escaping in the plugin’s inputs, enabling a high-...

5.9CVSS4.9AI score0.00392EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder