Lucene search
+L

7902 matches found

Cvelist
Cvelist
added 2024/10/20 10:06 a.m.30 views

CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

7.1CVSS0.00161EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/18 9:15 a.m.8 views

CVE-2024-47485

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...

9.8CVSS5.8AI score0.00554EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/18 9:15 a.m.6 views

CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

6.1CVSS5.8AI score0.00269EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/18 9:15 a.m.32 views

CVE-2024-47485

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...

9.8CVSS0.00554EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/18 9:15 a.m.18 views

CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

6.1CVSS0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/18 8:33 a.m.22 views

CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

2.1CVSS6.2AI score0.00269EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/18 8:33 a.m.64 views

CVE-2024-47486

CVE-2024-47486 affects Hikvision HikCentral Master Lite with an XSS vulnerability that enables an attacker to inject scripts into certain pages by submitting malicious data. The initial description notes XSS in some HikCentral Master Lite versions; connected sources corroborate the issue but do n...

6.1CVSS6.1AI score0.00269EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/18 8:33 a.m.29 views

CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data...

2.1CVSS0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/18 8:29 a.m.15 views

CVE-2024-47485

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...

5.5CVSS7.5AI score0.00554EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/18 8:29 a.m.31 views

CVE-2024-47485

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file...

5.5CVSS0.00554EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/18 12:00 a.m.9 views

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for the edge domain from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a CSV injection vulnerability that could allow an attacker to build...

9.8CVSS7.2AI score0.00554EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/18 12:00 a.m.11 views

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a cross-site scripting XSS vulnerability that allows an attacker to inje...

6.1CVSS5.7AI score0.00269EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/17 8:15 p.m.29 views

CVE-2024-49277

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through = 2.0.2...

6.5CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/17 7:23 p.m.50 views

CVE-2024-49277

CVE-2024-49277 denotes a Stored XSS in UltraAddons Elementor Lite (WordPress)

6.5CVSS5.9AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.8 views

WordPress plugin UltraAddons Elementor Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.1AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/17 12:00 a.m.7 views

PT-2024-33416 · Ultraaddons · Ultraaddons Elementor Lite

Name of the Vulnerable Software and Affected Versions: UltraAddons Elementor Lite versions 1.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...

6.5CVSS5.6AI score0.00262EPSS
SaveExploits0References4
NVD
NVD
added 2024/10/16 7:15 a.m.16 views

CVE-2012-10018

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesti...

8.3CVSS0.01181EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/10/16 6:43 a.m.27 views

CVE-2012-10018 Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesti...

8.3CVSS0.01181EPSS
SaveExploits1References5
CVE
CVE
added 2024/10/16 6:43 a.m.62 views

CVE-2012-10018

The CVE-2012-10018 issue affects WordPress plugins Mapplic (up to 6.1) and Mapplic Lite (up to 1.0). The connected data confirms a Server-Side Request Forgery that can lead to Stored/XSS via SVG files. Nuclei details specify that an authenticated user with author-level permissions can inject remo...

8.3CVSS8AI score0.01181EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.14 views

WordPress plugin Mapplic and Mapplic Lite 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.3CVSS7AI score0.01181EPSS
SaveExploits1References7
Rows per page
Query Builder