Lucene search
+L

5182 matches found

Prion
Prion
•added 2024/02/05 6:15 p.m.•34 views

Memory corruption

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function...

5CVSS7.5AI score0.01147EPSS
SaveExploits1References4Affected Software1
Patchstack
Patchstack
•added 2024/02/05 12:00 a.m.•21 views

WordPress Admin Menu Editor Plugin <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF)

Software Admin Menu Editor Type Plugin Vulnerable versions = 1.12 Fixed in 1.12.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24876 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 49e5e1a0e68c Credits Dhabaleshwar Das...

8.8CVSS6.3AI score0.00214EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/02 12:00 a.m.•26 views

PT-2024-20434 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery CSRF issue allows remote attackers to execute arbitrary code via the add menu.php component. This enables attackers to perform unauthorized actions on behalf of a legitimate...

8.8CVSS8.3AI score0.00531EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2024/02/01 11:15 a.m.•16 views

CVE-2023-51548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

4.8CVSS5.5AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/01 11:15 a.m.•34 views

CVE-2023-51548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

5.9CVSS5.7AI score0.00336EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/01 11:15 a.m.•30 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

4.3CVSS6.9AI score0.00336EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/01 10:14 a.m.•47 views

CVE-2023-51548 WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

5.9CVSS5.9AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/01 10:14 a.m.•73 views

CVE-2023-51548

CVE-2023-51548 concerns the WordPress plugin SlickNav Mobile Menu. The vulnerability is an Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation, allowing injected scripts to be stored and executed in pages viewed by users. Affected versions are Slic...

5.9CVSS5.5AI score0.00336EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/01 12:00 a.m.•15 views

WordPress plugin SlickNav Mobile Menu cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS5.3AI score0.00336EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•9 views

CVE-2023-51548: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

5.9CVSS5.5AI score0.00336EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/01 12:00 a.m.•17 views

PT-2024-14198 · Unknown · Slicknav Mobile Menu

Name of the Vulnerable Software and Affected Versions: SlickNav Mobile Menu versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS5.5AI score0.00336EPSS
SaveExploits0References7
GithubExploit
GithubExploit
•added 2024/01/30 4:02 p.m.•42 views

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

9.8CVSS6.5AI score0.01159EPSS
SaveExploits16
NVD
NVD
•added 2024/01/29 7:15 p.m.•38 views

CVE-2024-24134

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting XSS via the 'Menu Name' and 'Description' fields in the Update Menu section...

4.8CVSS4.9AI score0.00724EPSS
SaveExploits3References1
osv_cve
osv_cve
•added 2024/01/29 7:15 p.m.•21 views

CVE-2024-24134

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting XSS via the 'Menu Name' and 'Description' fields in the Update Menu section...

4.8CVSS5.3AI score0.00724EPSS
SaveExploits3References1
Prion
Prion
•added 2024/01/29 7:15 p.m.•37 views

Cross site scripting

Sourcecodester Online Food Menu 1.0 is vulnerable to Cross Site Scripting XSS via the 'Menu Name' and 'Description' fields in the Update Menu section...

4.3CVSS6.3AI score0.00724EPSS
SaveExploits3References1Affected Software1
osv_cve
osv_cve
•added 2024/01/29 3:15 p.m.•20 views

CVE-2023-7074

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS8.1AI score0.00329EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/01/29 2:44 p.m.•49 views

CVE-2023-7074 WP Social Bookmark Menu <= 1.2 - Settings Update via CSRF

The WP SOCIAL BOOKMARK MENU WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.7AI score0.00329EPSS
SaveExploits2References2
CVE
CVE
•added 2024/01/29 2:44 p.m.•69 views

CVE-2023-7074

The CVE refers to WP Social Bookmark Menu

8.8CVSS8.1AI score0.00329EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•9 views

PT-2024-15202

Name of the Vulnerable Software and Affected Versions WP SOCIAL BOOKMARK MENU WordPress plugin versions 1.2 and earlier Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This...

8.8CVSS8.1AI score0.00329EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2024/01/29 12:00 a.m.•19 views

Sourcecodester Online Food Menu Security Vulnerability

Online Food Menu is an online food menu for rems individual developers. A security vulnerability exists in Sourcecodester Online Food Menu version 1.0, which results from a cross-site scripting XSS attack on the Menu Name and Description fields in the Update Menu section...

4.8CVSS5.1AI score0.00724EPSS
SaveExploits3References2
Rows per page
Query Builder