Lucene search
+L

2332 matches found

OSV
OSV
added 2018/04/09 5:29 p.m.10 views

CVE-2018-9864

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field...

6.1CVSS5.8AI score0.01696EPSS
SaveExploits1References3
Prion
Prion
added 2018/04/09 5:29 p.m.26 views

Cross site scripting

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field...

4.3CVSS6AI score0.01696EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2018/04/09 5:00 p.m.40 views

CVE-2018-9864

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field...

6AI score0.01696EPSS
SaveExploits1References3
CVE
CVE
added 2018/04/09 5:00 p.m.69 views

CVE-2018-9864

CVE-2018-9864 affects the WP Live Chat Support plugin for WordPress (older than 8.0.06). The vulnerability is a stored XSS in the Name field (wplc_name) that could be triggered via wp_json/wp_live_chat_support/v1/start_chat when initiating a chat. Public records show CVSS2 base 4.3 (MEDIUM) and C...

6.1CVSS5.9AI score0.01696EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/04/02 12:29 p.m.4 views

CVE-2018-9163

A stored Cross-site scripting XSS vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 Build 5350 allows remote authenticated users with Add New Technician permissions to inject arbitrary web script or HTML via the loginName field to technicianAction.do...

5.4CVSS5.7AI score0.04922EPSS
SaveExploits5References6
CNVD
CNVD
added 2018/03/28 12:00 a.m.8 views

Open-AudIT Professional Cross-Site Scripting Vulnerability

Open-AudIT Professional is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in Open-AudIT Professional version 2.1. A remote attacker can exploit this vulnerability to...

5.4CVSS6.5AI score0.02246EPSS
SaveExploits5References1
Packet Storm
Packet Storm
added 2018/03/26 12:00 a.m.49 views

Fast AVI MPEG Splitter 1.2 Buffer Overflow

SWAMI KARUPASAMI THUNAI Exploit Title: Stack Based Buffer Overflow in Allok Fast AVI MPEG Splitter 1.2 Windows XP SP3 Date: 06-03-2018 Exploit Author: Mohan Ravichandran & Velayutham Selvaraj Organization : TwinTech Solutions Vulnerable Software: Allok Fast AVI MPEG Splitter 1.2 Vendor Homepage:...

7.1AI score
SaveExploits0
zdt
zdt
added 2018/03/23 12:00 a.m.55 views

Easy CD DVD Copy 1.3.24 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title : Easy CD DVD Copy v1.3.24 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.divxtodvd.net/index.htm Vulnerable...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/03/23 12:00 a.m.30 views

Easy CD DVD Copy 1.3.24 Buffer Overflow

!/usr/bin/python Exploit Title : Easy CD DVD Copy v1.3.24 - Local Buffer Overflow SEH Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.divxtodvd.net/index.htm Vulnerable Software: http://www.divxtodvd.net/easycddvdcopy.exe Test...

7.1AI score
SaveExploits0
OSV
OSV
added 2018/03/22 9:29 p.m.8 views

CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen...

5.4CVSS5.8AI score0.02246EPSS
SaveExploits5References2
OSV
OSV
added 2018/03/17 1:29 p.m.7 views

CVE-2018-8737

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...

5.4CVSS5.8AI score0.00669EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/16 1:29 p.m.5 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.4CVSS5.8AI score0.01004EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/16 1:29 p.m.18 views

Information disclosure

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

3.5CVSS6AI score0.01004EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2018/03/16 1:00 p.m.28 views

CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

5.3AI score0.01004EPSS
SaveExploits0References2
OSV
OSV
added 2018/03/12 3:29 p.m.23 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.2AI score
SaveExploits0References2
NVD
NVD
added 2018/03/12 3:29 p.m.22 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.1AI score0.01417EPSS
SaveExploits0References2
Prion
Prion
added 2018/03/12 3:29 p.m.16 views

Cross site scripting

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

4.3CVSS5.9AI score0.01417EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2018/03/12 3:00 p.m.73 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

6.1CVSS6.3AI score0.01417EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/03/12 3:00 p.m.34 views

CVE-2017-2661

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster...

5.9AI score0.01417EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/03/02 12:00 a.m.10 views

PHP Scripts Mall Entrepreneur Job Portal Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a set of PHP based recruitment, job search website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Entrepreneur Job Portal Script. A remote attacker can exploit this vulnerability by sending the...

4.8CVSS6.4AI score0.00669EPSS
SaveExploits1References1
Rows per page
Query Builder