Lucene search
+L

1828 matches found

NVD
NVD
•added 2024/11/19 5:15 p.m.•27 views

CVE-2024-50556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

6.5CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:32 p.m.•60 views

CVE-2024-50556

CVE-2024-50556 affects WordPress WM Zoom plugin versions

6.5CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:32 p.m.•27 views

CVE-2024-50556 WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

6.5CVSS0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:32 p.m.•13 views

CVE-2024-50556 WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

6.5CVSS5.9AI score0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•11 views

CVE-2024-51797 WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through 1.0...

6.5CVSS6.9AI score0.00367EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2024-51797: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion ultimate-accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through = 1.0...

6.5CVSS5.8AI score0.00367EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/18 10:15 p.m.•45 views

CVE-2024-52349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Awesome Tool Tip awesome-tool-tip allows DOM-Based XSS.This issue affects Awesome Tool Tip: from n/a through = 1.0...

6.5CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/18 9:32 p.m.•59 views

CVE-2024-52349 WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Awesome Tool Tip awesome-tool-tip allows DOM-Based XSS.This issue affects Awesome Tool Tip: from n/a through = 1.0...

6.5CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/18 4:05 p.m.•52 views

CVE-2024-52422 WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...

6.5CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/18 4:05 p.m.•18 views

CVE-2024-52422 WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...

6.5CVSS8.6AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/18 4:05 p.m.•84 views

CVE-2024-52422

CVE-2024-52422 is a stored XSS in the WordPress plugin WP Githuber MD (WordPress plugin: WP Githuber MD). Affected versions are ≤ 1.16.3. The root cause is improper input neutralization during web page generation, enabling stored cross-site scripting. Public data (Patchstack/RedHat/ENISA) identif...

6.5CVSS7.2AI score0.0024EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•5 views

CVE-2024-52349: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Awesome Tool Tip awesome-tool-tip allows DOM-Based XSS.This issue affects Awesome Tool Tip: from n/a through = 1.0...

6.5CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/18 12:00 a.m.•5 views

CVE-2024-52422: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terry L. WP Githuber MD wp-githuber-md allows Stored XSS.This issue affects WP Githuber MD: from n/a through = 1.16.3...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/18 12:00 a.m.•18 views

WordPress plugin WP Githuber MD 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

6.5CVSS7.7AI score0.0024EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/14 5:38 p.m.•26 views

GHSA-HFF8-HJWV-J9Q7 Remote Code Execution on click of <a> Link in markdown preview

Summary There is a vulnerability in Joplin-desktop that leads to remote code execution RCE when a user clicks on an link within untrusted notes. The issue arises due to insufficient sanitization of tag attributes introduced by the Mermaid. This vulnerability allows the execution of untrusted HTML...

7.7CVSS8.1AI score0.01033EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2024/11/13 11:17 a.m.•18 views

WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Fazle Mawla Patchstack Alliance in WordPress Plugin WP Githuber MD versions = 1.16.3...

6.5CVSS6.1AI score0.0024EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/13 12:00 a.m.•24 views

The vulnerability of the md component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the md component in the Linux operating system’s kernel is related to errors in resource management in the submitflushes function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.2AI score0.00272EPSS
SaveExploits0References16Affected Software5
Patchstack
Patchstack
•added 2024/11/13 12:00 a.m.•27 views

WordPress WP Githuber MD Plugin <= 1.16.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Githuber MD Type Plugin Vulnerable versions = 1.16.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52422 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 80930d0544eb Credits Fazle Mawla Required privilege Contribut...

6.5CVSS6.9AI score0.0024EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•15 views

kernel: md: Fix missing release of &#39;active_io&#39; for flush

In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'activeio' for flush The Linux kernel CVE team has assigned CVE-2024-27023 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050105-CVE-2024-27023-4810@gregkh/T...

5.5CVSS6.8AI score0.00272EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/11/12 9:11 a.m.•17 views

kernel: md: Don't ignore suspended array in md_check_recovery()

In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in mdcheckrecovery The Linux kernel CVE team has assigned CVE-2024-26758 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040304-CVE-2024-26758-dcc3@gregkh/T...

5.5CVSS6.8AI score0.00212EPSS
SaveExploits0References5
Rows per page
Query Builder