Lucene search
+L

9780 matches found

OSV
OSV
•added 2026/05/10 8:15 p.m.•19 views

CVE-2026-45191 Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

6.5CVSS5.9AI score
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/05/10 8:15 p.m.•21 views

CVE-2026-45191

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

6.5CVSS5.8AI score0.00484EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/10 8:15 p.m.•17 views

CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6AI score0.00484EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/10 8:15 p.m.•57 views

CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

0.00484EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/10 8:15 p.m.•56 views

CVE-2026-45190

The Net::CIDR::Lite Perl module (versions before 0.24 ) contains a vulnerability where it fails to properly validate IP address and CIDR mask inputs. The parser may re-encode inputs containing trailing newlines or non-ASCII digit characters into different addresses than the literal string provide...

6.5CVSS6AI score0.00484EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/05/10 8:15 p.m.•23 views

CVE-2026-45190

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS6AI score0.00484EPSS
SaveExploits0
OSV
OSV
•added 2026/05/10 8:15 p.m.•14 views

CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS5.9AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/05/10 3:31 p.m.•30 views

EUVD-2022-55973

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS5.7AI score0.00191EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/10 1:16 p.m.•28 views

CVE-2022-50948

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS0.00191EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/10 12:12 p.m.•50 views

CVE-2022-50948 Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS0.00191EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/10 12:12 p.m.•20 views

CVE-2022-50948

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS5.7AI score0.00191EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/05/10 12:12 p.m.•34 views

CVE-2022-50948

Motopress Hotel Booking Lite 4.2.4 is affected by a stored cross-site scripting (XSS) vulnerability. The issue allows authenticated attackers to inject script tags via accommodation type payloads, specifically through the title and excerpt fields when creating accommodation types. These scripts c...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/10 12:12 p.m.•14 views

CVE-2022-50948 Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/10 12:00 a.m.•24 views

PT-2026-39538

Name of the Vulnerable Software and Affected Versions Net::CIDR::Lite versions prior to 0.24 Description Net::CIDR::Lite for Perl fails to properly validate IP address and CIDR mask inputs. Inputs containing non-ASCII digit characters or a trailing newline pass validation but are re-encoded by th...

6.5CVSS5.8AI score0.00484EPSS
SaveExploits0References26
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•21 views

Net-CIDR-Lite 安全漏洞

Net-CIDR-Lite is a Perl module for handling CIDR addresses from the individual developers at Stig. A security vulnerability exists in Net-CIDR-Lite versions prior to 0.24 that stems from not properly handling extra zero characters in CIDR mask values, which could lead to IP ACL bypass...

6.5CVSS5.8AI score0.00484EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/10 12:00 a.m.•46 views

PT-2026-39477

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS5.7AI score0.00191EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/10 12:00 a.m.•25 views

MotoPress Hotel Booking Lite 跨站脚本漏洞

MotoPress Hotel Booking Lite is a hotel booking software developed by MotoPress. Version 4.2.4 of MotoPress Hotel Booking Lite contains a cross-site scripting vulnerability. This vulnerability stems from a stored-cross-site scripting flaw in the accommodation type field, which may allow...

6.4CVSS5.6AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•5 views

CVE-2022-50948: Improper Neutralization of Input During Web Page Generation

Motopress Hotel Booking Lite 4.2.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting payloads in accommodation type fields. Attackers can inject script tags through the title and excerpt parameters when creating...

6.4CVSS5.8AI score0.00191EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•4 views

CVE-2026-45190: Improper Validation of Unsafe Equivalence in Input

Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...

6.5CVSS6AI score0.00484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/10 12:00 a.m.•5 views

CVE-2026-45191: Improper Validation of Unsafe Equivalence in Input

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation and parse to the same prefix as their unpadded value. See also CVE-2026-45190...

6.5CVSS5.8AI score0.00484EPSS
SaveExploits0References2
Rows per page
Query Builder