Lucene search
K

3948 matches found

Vulnrichment
Vulnrichment
added 2024/11/12 2:0 a.m.9 views

CVE-2024-11097 SourceCodester Student Record Management System Main Menu infinite loop

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...

4.8CVSS7AI score0.00275EPSS
Exploits1References5
CVE
CVE
added 2024/11/12 2:0 a.m.53 views

CVE-2024-11097

SourceCodester Student Record Management System 1.0 is affected, specifically the Main Menu component. The issue allows an infinite loop caused by manipulation, with exploitation requiring local access. Public exploits have been disclosed historically across multiple sources, and remediation guid...

5.5CVSS4.3AI score0.00275EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/11/12 2:0 a.m.25 views

CVE-2024-11097 SourceCodester Student Record Management System Main Menu infinite loop

A vulnerability has been found in SourceCodester Student Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Main Menu. The manipulation leads to infinite loop. Attacking locally is a requirement. The exploit has been disclosed to t...

4.8CVSS0.00275EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.2 views

PT-2024-16758 · Sourcecodester · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Record Management System version 1.0 SourceCodester versions prior to the latest update Description: A vulnerability has been found in the SourceCodester Student Record Management System, affecting the Main Menu...

5.5CVSS6.9AI score0.00275EPSS
Exploits1References11
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.1 views

Ampache 跨站脚本漏洞

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Favicon in the interface section of the Ampache menu...

8.4CVSS5.9AI score0.00484EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.2 views

Ampache 跨站脚本漏洞

Ampache is an open source web-based audio/video application and file manager from Ampache. A cross-site scripting vulnerability exists in Ampache version 7.0.1, which originates from a user being able to change the Custom URL - Logo in the interface section of the Ampache menu...

9CVSS5.9AI score0.00499EPSS
Exploits1References2
NVD
NVD
added 2024/11/09 2:15 p.m.7 views

CVE-2024-51618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Admin Menu custom-admin-menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through = 1.0.0...

6.5CVSS0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 2:0 p.m.14 views

CVE-2024-51618 WordPress Custom Admin Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Admin Menu custom-admin-menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through = 1.0.0...

6.5CVSS5.9AI score0.00238EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.2 views

WordPress plugin Custom Admin Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.00238EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.2 views

PT-2024-34761 · Duogeek · Duogeek Custom Admin Menu

Name of the Vulnerable Software and Affected Versions: DuoGeek Custom Admin Menu versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in DuoGeek Custom Admin...

6.5CVSS5.7AI score0.00238EPSS
Exploits0References5
Patchstack
Patchstack
added 2024/11/08 2:6 p.m.3 views

WordPress My Restaurant Menu plugin <= 0.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin My Restaurant Menu versions = 0.2.0...

6.5CVSS6.1AI score0.00374EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:9 p.m.1 views

WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Trendy Restaurant Menu versions = 1.0.0...

6.5CVSS6.1AI score0.00374EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/11/08 5:15 a.m.16 views

CVE-2020-8007

The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...

9.8CVSS0.01756EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/11/08 12:0 a.m.15 views

CVE-2020-8007

The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...

0.01756EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/11/08 12:0 a.m.11 views

CVE-2020-8007

The pwrstudio web application of EV Charger in the server in Circontrol Raption through 5.6.2 is vulnerable to OS command injection via three fields of the configuration menu for ntpserver0, ntpserver1, and pingip...

7.5AI score0.01756EPSS
Exploits1References2
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.8 views

WordPress Trendy Restaurant Menu Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Trendy Restaurant Menu Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51796 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5538c79e9ace Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00374EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/11/08 12:0 a.m.45 views

CVE-2020-8007

The CVE-2020-8007 issue affects Circontrol Raption’s server-side pwrstudio web app (EV Charger) up to versions through 5.6.2. The vulnerability is an OS command injection in the configuration fields ntpserver0, ntpserver1, and pingip, as reported across multiple sources. Impact is described as co...

9.8CVSS7.5AI score0.01756EPSS
Exploits1References3
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.7 views

WordPress My Restaurant Menu Plugin <= 0.2.0 is vulnerable to Cross Site Scripting (XSS)

Software My Restaurant Menu Type Plugin Vulnerable versions = 0.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51849 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 33933ea41038 Credits SOPROBRO Required privilege Contribut...

6.5CVSS6.9AI score0.00374EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/31 3:1 p.m.2 views

WordPress Custom Admin Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Custom Admin Menu versions = 1.0.0...

6.5CVSS6.1AI score0.00238EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/31 12:0 a.m.6 views

WordPress Custom Admin Menu Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Custom Admin Menu Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51618 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bbf3ecaf90b5 Credits SOPROBRO Required privilege Contributo...

6.5CVSS6.5AI score0.00238EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder