Lucene search
+L

7349 matches found

CVE
CVE
added 2023/12/20 3:49 p.m.61 views

CVE-2023-33209

CVE-2023-33209 concerns the WordPress plugin SEO Change Monitor – Track Website Changes . The entry/description confirms an SQL Injection vulnerability due to improper neutralization of input, affecting plugin versions <= 1.2 (from n/a through 1.2). A connected Patchstack record specifies the ...

8.5CVSS8.6AI score0.00638EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.10 views

PT-2023-8150 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this issue...

10CVSS7.6AI score0.01483EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.8 views

PT-2023-8149 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower affected versions not specified Description: The issue is related to the use of dangerous methods or functions in the LinuxMonitorConsole class of the Voltronic Power ViewPower software. This allows remote attackers ...

9.8CVSS7.6AI score0.01483EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.6 views

WordPress Plugin Download Monitor Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.9CVSS6.8AI score0.00906EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.8 views

WordPress Plugin SEO Change Monitor SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

8.5CVSS7.7AI score0.00638EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/14 4:15 p.m.10 views

CVE-2023-49771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

6.1CVSS5.8AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/14 4:15 p.m.8 views

CVE-2023-49770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

4.8CVSS7.3AI score0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 4:15 p.m.34 views

CVE-2023-49770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

5.9CVSS0.00394EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 4:15 p.m.26 views

CVE-2023-49771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

7.1CVSS0.00407EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/14 4:15 p.m.19 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

5.8CVSS7.1AI score0.00407EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/14 3:48 p.m.8 views

CVE-2023-49771 WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Reflected XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

7.1CVSS6.9AI score0.00407EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/14 3:48 p.m.88 views

CVE-2023-49771

CVE-2023-49771 affects the WordPress plugin Smart External Link Click Monitor [Link Log] up to version 5.0.2. Descriptions across sources confirm an improper neutralization of input leading to Reflected XSS, exploitable by unauthenticated users. No patch is available; PatchStack notes no fixed ve...

7.1CVSS7AI score0.00407EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/14 3:45 p.m.47 views

CVE-2023-49770 WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...

5.9CVSS5.9AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/14 3:45 p.m.103 views

CVE-2023-49770

CVE-2023-49770: Stored XSS in WordPress Smart External Link Click Monitor (Link Log)

5.9CVSS6.5AI score0.00394EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/14 12:00 a.m.17 views

PT-2023-31340 · Unknown · Smart External Link Click Monitor [Link Log]

Name of the Vulnerable Software and Affected Versions: Smart External Link Click Monitor Link Log versions n/a through 5.0.2 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker...

5.9CVSS5.8AI score0.00394EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.7 views

WordPress plugin and WordPress cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2023/12/09 12:00 a.m.16 views

Smart External Link Click Monitor [Link Log] <= 5.0.2 - Reflected Cross-Site Scripting

Description The Smart External Link Click Monitor Link Log plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.1CVSS6.5AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/07 6:15 a.m.40 views

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

4.3CVSS0.00511EPSS
SaveExploits4References2
ATTACKERKB
ATTACKERKB
added 2023/12/07 6:15 a.m.13 views

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

4.3CVSS5.8AI score0.00511EPSS
SaveExploits4References3
OSV
OSV
added 2023/12/07 6:15 a.m.13 views

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

4.3CVSS5.8AI score0.00511EPSS
SaveExploits4References2
Rows per page
Query Builder