Lucene search
+L

7347 matches found

Vulnrichment
Vulnrichment
added 2024/03/27 6:50 a.m.23 views

CVE-2024-29907 WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 6:50 a.m.28 views

CVE-2024-29907 WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

7.1CVSS7.1AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 6:50 a.m.62 views

CVE-2024-29907

CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor

7.1CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.8 views

PT-2024-23128 · Unknown · Active Websight Seo Backlink Monitor

Name of the Vulnerable Software and Affected Versions: Active Websight SEO Backlink Monitor versions 1.5.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attack...

7.1CVSS9.4AI score0.00354EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.7 views

WordPress Plugin SEO Backlink Monitor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00354EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/25 12:00 a.m.11 views

WordPress SEO Backlink Monitor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Software SEO Backlink Monitor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29907 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 62c1627bf899 Credits Dimas Maulana Required...

7.1CVSS6.8AI score0.00354EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/23 12:00 a.m.11 views

PT-2024-10973 · Unknown +1 · Aops-Ceres +1

Name of the Vulnerable Software and Affected Versions: openEuler aops-ceres versions 1.3.0 through 1.4.1 Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection', which allows Command Injection. This problem is...

7.3CVSS6.8AI score0.00778EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.10 views

The vulnerability in the Office Performance Monitor executable file of the Microsoft Office software package allows a perpetrator to gain increased privileges.

The vulnerability of the Office Performance Monitor executable file of the Microsoft Office software package is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially...

7.8CVSS7.2AI score0.01155EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.11 views

Xen Security Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.14...

6.5CVSS6.4AI score0.00269EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.6 views

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

3.8CVSS6.6AI score0.00203EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2024/03/12 7:00 a.m.138 views

March 12, 2024—KB5035845 (OS Builds 19044.4170 and 19045.4170) - EXPIRED

None None...

8.8CVSS6.8AI score0.08031EPSS
SaveExploits0
Veracode
Veracode
added 2024/03/12 5:46 a.m.26 views

Cross-Site Scripting

org.jenkins-ci.plugins, build-monitor-plugin is vulnerable to Cross-site Scripting XSS. The vulnerability is due improper sanitization of Build Monitor View names, which allows attackers with the ability to configure Build Monitor Views to inject malicious scripts into the view name...

5.4CVSS6.6AI score0.80173EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/03/06 6:30 p.m.36 views

GHSA-5J5R-6MV9-M255 Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.4AI score0.80173EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/03/06 6:30 p.m.42 views

Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.80173EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/03/06 5:15 p.m.9 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.2AI score
SaveExploits0References2
NVD
NVD
added 2024/03/06 5:15 p.m.33 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4CVSS5.5AI score0.80173EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/06 5:15 p.m.40 views

Cross site scripting

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 5:01 p.m.19 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/06 5:01 p.m.96 views

CVE-2024-28156

CVE-2024-28156 affects Jenkins Build Monitor View Plugin (versions ≤ 1.14-860.vd06ef2568b_3f). The root cause is that Build Monitor View names are not escaped, which enables stored cross-site scripting (XSS) when an attacker can configure Build Monitor Views. Multiple sources corroborate: Red Hat...

5.4CVSS5.3AI score0.80173EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/06 5:01 p.m.47 views

CVE-2024-28156

Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure Build Monitor Views...

5.4AI score0.80173EPSS
SaveExploits0References2
Rows per page
Query Builder