Lucene search
+L

6195 matches found

osv_cve
osv_cve
•added 2023/02/06 8:15 p.m.•21 views

CVE-2023-0144

The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS6.1AI score0.00477EPSS
SaveExploits2References1
Mend
Mend
•added 2023/02/06 8:00 p.m.•20 views

CVE-2015-10073

A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content leads to cross site scripting. It is...

9.6CVSS0.00883EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2023/02/06 8:00 p.m.•30 views

CVE-2015-10073 tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting

A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content leads to cross site scripting. It is...

4CVSS9.2AI score0.00883EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•4 views

CVE-2015-10073: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content leads to cross site scripting. It is...

9.6CVSS3.9AI score0.00883EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•9 views

CVE-2023-0144: Improper Neutralization of Input During Web Page Generation

The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.9AI score0.00477EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•10 views

PT-2023-16033

Name of the Vulnerable Software and Affected Versions Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin versions prior to 3.8.0 Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the plugin's failure...

5.4CVSS0.00477EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•17 views

PT-2023-10252 · Unknown · Tinymighty Wikiseo

Name of the Vulnerable Software and Affected Versions: tinymighty WikiSEO version 1.2.1 Description: A vulnerability was found in tinymighty WikiSEO, affecting the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content...

9.6CVSS6.5AI score0.00883EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2023/02/04 12:00 a.m.•32 views

Fedora: Security Advisory for kernel (FEDORA-2023-4006357f7e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.8AI score0.00298EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2023/01/24 5:44 a.m.•31 views

Facebook Introduces New Features for End-to-End Encrypted Messenger App

Meta Platforms on Monday announced that it has started to expand global testing of end-to-end encryption E2EE in Messenger chats by default. "Over the next few months, more people will continue to see some of their chats gradually being upgraded with an extra layer of protection provided by...

0.7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/01/24 12:00 a.m.•48 views

Fedora: Security Advisory for kernel (FEDORA-2023-0597579983)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8.1AI score0.01944EPSS
SaveExploits5References2
Fedora
Fedora
•added 2023/01/23 2:00 a.m.•48 views

[SECURITY] Fedora 36 Update: kernel-6.1.7-100.fc36

The kernel meta package...

7.8CVSS2.4AI score0.01944EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2023/01/23 12:00 a.m.•39 views

Fedora: Security Advisory for kernel (FEDORA-2023-58eac2b872)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS8.1AI score0.01944EPSS
SaveExploits5References2
Fedora
Fedora
•added 2023/01/21 3:44 a.m.•53 views

[SECURITY] Fedora 36 Update: git-2.39.1-1.fc36

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

9.8CVSS8AI score0.56334EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/01/21 12:00 a.m.•14 views

PT-2025-37655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's f2fs implementation within the update iostat latency function. A mixup between META FLUSH and NR PAGE TYPE can lead to potential memory corruption. Th...

7.8CVSS6.1AI score0.00176EPSS
SaveExploits0References21
osv_cve
osv_cve
•added 2023/01/20 7:15 p.m.•16 views

CVE-2022-45558

Cross site scripting XSS vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag...

6.1CVSS5.9AI score0.00448EPSS
SaveExploits1References1
NVD
NVD
•added 2023/01/20 7:15 p.m.•26 views

CVE-2022-45558

Cross site scripting XSS vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag...

6.1CVSS6.2AI score0.00448EPSS
SaveExploits1References1
Prion
Prion
•added 2023/01/20 7:15 p.m.•26 views

Cross site scripting

Cross site scripting XSS vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag...

5.8CVSS6.3AI score0.00448EPSS
SaveExploits1References1Affected Software1
The Hacker News
The Hacker News
•added 2023/01/20 12:57 p.m.•33 views

WhatsApp Hit with €5.5 Million Fine for Violating Data Protection Laws

The Irish Data Protection Commission DPC on Thursday imposed fresh fines of €5.5 million against Meta's WhatsApp for violating data protection laws when processing users' personal information. At the heart of the ruling is an update to the messaging platform's Terms of Service that was imposed in...

0.7AI score
SaveExploits0
Cvelist
Cvelist
•added 2023/01/20 12:00 a.m.•40 views

CVE-2022-45558

Cross site scripting XSS vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag...

6.4AI score0.00448EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•11 views

CVE-2022-45558: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag...

6.1CVSS6.3AI score0.00448EPSS
SaveExploits1References3
Rows per page
Query Builder