Lucene search
+L

1436 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:20 p.m.14 views

CVE-2021-24176

The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard...

5.4CVSS6.9AI score0.02044EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:45 p.m.8 views

CVE-2020-23618

A reflected cross site scripting XSS vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page...

6.1CVSS6AI score0.00546EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.6 views

CVE-2020-11839

Cross Site Scripting XSS vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting XSS or information disclosure...

6.1CVSS5.5AI score0.00641EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:55 p.m.8 views

CVE-2020-11860

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...

6.1CVSS6.3AI score0.00634EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:49 p.m.5 views

CVE-2020-11851

Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code...

9.8CVSS7.4AI score0.02825EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:22 p.m.8 views

CVE-2020-25834

Cross-Site Scripting vulnerability on Micro Focus ArcSight Logger product, affecting version 7.1. The vulnerability could be remotely exploited resulting in Cross-Site Scripting XSS...

5.4CVSS6.5AI score0.00682EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 10:12 a.m.8 views

CVE-2019-11657

Cross-Site Request Forgery vulnerability in all Micro Focus ArcSight Logger affecting all product versions below version 7.0. The vulnerability could be exploited to perform CSRF attack...

8.8CVSS7AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:55 a.m.8 views

CVE-2019-11656

Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.8AI score0.00644EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.11 views

ABB多款产品 安全漏洞

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

6.9CVSS6.1AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/07 4:55 a.m.6 views

MAL-2025-3674 Malicious code in @joshcyber123/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d770dd15cd82921c4fed3497ee3c3b6e58515c20307d8c8aa3f34b72a5e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/26 7:6 a.m.8 views

Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2025/04/26 7:6 a.m.16 views

MAL-2025-191816 Malicious code in pretty-cli-logger (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 10:57 p.m.15 views

CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

5.4CVSS7.2AI score0.0032EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/23 4:6 p.m.5 views

Malicious code in sincpro-logger (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/04/23 4:6 p.m.4 views

MAL-2025-3470 Malicious code in sincpro-logger (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2025/04/17 4:15 p.m.16 views

CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Logger: from n/a through = 2.2...

5.4CVSS0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.6 views

PT-2025-17015 · Unknown · Itron Wp Logger

Name of the Vulnerable Software and Affected Versions: iTRON WP Logger versions prior to 2.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to 2.2, updat...

5.4CVSS6.3AI score0.0032EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.5 views

WordPress plugin WP Logger 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.4AI score0.0032EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/04/09 3:32 p.m.4 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger is being set to debug level. An attacker can access sensitive broker properties by exploiting the verbose logging configuration. Workaround This...

6.8CVSS5.5AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/04/06 3:41 a.m.4 views

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to concurrent writes to a map by logger.go. An attacker can induce a read-write conflict and cause repeated restarts and then a panic by writing to multiple logs simultaneously. Remediation There is no fixed version f...

8.2CVSS7.3AI score0.00255EPSS
SaveExploits0References2
Rows per page
Query Builder