Lucene search
+L

62 matches found

NVD
NVD
added 2026/01/06 10:15 a.m.8 views

CVE-2025-14552

The MediaPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mpp-uploader shortcode in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/06 9:20 a.m.32 views

CVE-2025-14552 MediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode

The MediaPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mpp-uploader shortcode in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00157EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.10 views

PT-2026-1428

Name of the Vulnerable Software and Affected Versions MediaPress plugin for WordPress versions up to and including 1.6.1 Description The MediaPress plugin for WordPress is susceptible to Stored Cross-Site Scripting through the mpp-uploader shortcode. This is due to inadequate input sanitization a...

6.4CVSS5.3AI score0.00157EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-3112

Malware in sbrugna...

9.8CVSS9.4AI score0.03746EPSS
SaveExploits4References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-32220

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00118EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:2 a.m.10 views

CVE-2023-28550

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

7.8CVSS7.1AI score0.00118EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/26 12:0 a.m.48 views

Apache Doris Command Execution Vulnerability

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a command execution vulnerability that originates from an unchecked jdbc driver file used by the jdbc directory, whic...

9.8CVSS7.9AI score0.00962EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/26 12:0 a.m.58 views

Apache Doris Security Bypass Vulnerability

Apache Doris is a modern MPP analytic database product of the U.S. Apache Apache Foundation. Can provide sub-second queries and efficient real-time data analysis. Apache Doris has a security bypass vulnerability that stems from the use of the chmod function, which can be exploited by an attacker ...

5.3CVSS6.9AI score0.00221EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/05 3:15 a.m.32 views

CVE-2023-28550

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

7.8CVSS0.00118EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/05 3:15 a.m.27 views

Memory corruption

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

4.3CVSS7.4AI score0.00118EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/05 3:3 a.m.79 views

CVE-2023-28550

CVE-2023-28550 affects Qualcomm chipsets, describing memory corruption in MPP performance when accessing the DSM watermark via an external memory address. The vulnerability is tied to improper memory bounds handling within the MPP component, leading to potential high-severity impact (as indicated...

7.8CVSS7.9AI score0.00118EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/05 3:3 a.m.42 views

CVE-2023-28550 Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Memory corruption in MPP performance while accessing DSM watermark using external memory address...

7.8CVSS8AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/02 2:29 p.m.5 views

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

9.8CVSS6.1AI score0.03746EPSS
SaveExploits4References3
Prion
Prion
added 2017/08/02 2:29 p.m.16 views

Sql injection

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

7.5CVSS9.9AI score0.03746EPSS
SaveExploits4References3Affected Software1
NVD
NVD
added 2017/08/02 2:29 p.m.15 views

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

9.8CVSS9.9AI score0.03746EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2017/08/02 2:0 p.m.25 views

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

10AI score0.03746EPSS
SaveExploits4References3
CVE
CVE
added 2017/08/02 2:0 p.m.58 views

CVE-2017-11494

SOL.Connect ISET-mpp meter, version 1.2.4.2 and earlier, contains an SQL injection in the login action via the vulnerable user parameter. This results from inadequate input handling and allows remote attackers to execute arbitrary SQL commands, potentially gaining unauthorized access or manipulat...

9.8CVSS9.9AI score0.03746EPSS
SaveExploits4References3Affected Software1
Exploit DB
Exploit DB
added 2017/08/01 12:0 a.m.52 views

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp meter 1.2.4.2 and possibly earlier Vulnerable...

9.8CVSS8.4AI score0.03746EPSS
SaveExploits4
exploitpack
exploitpack
added 2017/08/01 12:0 a.m.32 views

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect ISET-mpp...

7.5CVSS0.5AI score0.03746EPSS
SaveExploits4
zdt
zdt
added 2017/08/01 12:0 a.m.40 views

SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection Vulnerability

Exploit for hardware platform in category web applications Vulnerability type: SQL injection, leading to administrative access through authentication bypass. ----------------------------------- Product: SOL.Connect ISET-mpp meter ----------------------------------- Affected version: SOL.Connect...

7.5CVSS9.2AI score0.03746EPSS
SaveExploits4
Rows per page
Query Builder