Lucene search
+L

13279 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•5 views

CVE-2024-53783: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

7.6CVSS8.6AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•12 views

CVE-2024-53786: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codeless Cowidgets – Elementor Addons cowidgets-elementor-addons allows Stored XSS.This issue affects Cowidgets – Elementor Addons: from n/a through = 1.2.0...

6.5CVSS8.5AI score0.00292EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•18 views

WordPress Plugin Portfolio Builder – Portfolio Gallery Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

5.9CVSS8AI score0.00301EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•16 views

WordPress Plugins: Best Add-ons for Elementor – Cross-site Script Vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

6.5CVSS8.1AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•17 views

WordPress plugin Mail Picker has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•22 views

WordPress plugin Cowidgets has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00292EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/30 12:00 a.m.•11 views

CVE-2024-53771: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through = 1.7.6.9...

6.5CVSS8.6AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•24 views

WordPress plugin Pixobe Cartography has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

6.5CVSS8AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/30 12:00 a.m.•24 views

WordPress plugin SimpleSchema has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8AI score0.00294EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/11/29 9:31 p.m.•37 views

Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

7.5CVSS5.9AI score0.00544EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2024/11/29 9:31 p.m.•39 views

GHSA-2GX6-QRPP-C4P3 Ant-Media-Server vulnerable to Improper Output Neutralization for Logs

Ant-Media-Server v2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be include...

8.7CVSS5.9AI score0.00544EPSS
SaveExploits0References5
NVD
NVD
•added 2024/11/29 8:15 p.m.•36 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS0.00544EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/29 12:00 a.m.•40 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

0.00544EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/29 12:00 a.m.•16 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

5.9AI score0.00544EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•9 views

CVE-2024-35371: Out-of-bounds Read

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS6AI score0.00544EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/11/29 12:00 a.m.•26 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

7.5CVSS6.7AI score
SaveExploits0References5
Mend
Mend
•added 2024/11/29 12:00 a.m.•18 views

CVE-2024-35371

Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization in the logging mechanism. Without proper filtering or validation, user-controllable data, such as identifiers or other sensitive information, can be included...

8.7CVSS5.9AI score0.00544EPSS
SaveExploits0References6
CVE
CVE
•added 2024/11/29 12:00 a.m.•84 views

CVE-2024-35371

Ant-Media-Server version v2.8.2 is vulnerable to Improper Output Neutralization for Logs due to insufficient input sanitization within the logging mechanism. The flaw allows user-controllable data, including identifiers or other sensitive information, to be included in log entries without proper ...

7.5CVSS5.9AI score0.00544EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•25 views

Advantech EKI-6333AC-2G Wireless Access Point Command Execution

The vulnerability of the microprogrammed software in multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

7.8CVSS9.4AI score0.00443EPSS
SaveExploits0References2Affected Software3
NVD
NVD
•added 2024/11/28 11:15 a.m.•48 views

CVE-2024-53737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Stored XSS.This issue affects WP Mailster: from n/a through = 1.8.16.0...

6.5CVSS0.00299EPSS
SaveExploits0References1
Rows per page
Query Builder