Lucene search
K

1221 matches found

Patchstack
Patchstack
added 2023/08/14 12:0 a.m.11 views

WordPress LINE Notify Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Software LINE Notify Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30497 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 329899cef564 Credits Ivy TOOR, LISA Requir...

7.1CVSS5.6AI score0.0033EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/28 9:15 p.m.2 views

CVE-2023-38988

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators...

4.3CVSS5.8AI score0.00383EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/07/28 12:0 a.m.4 views

jeesite 安全漏洞

Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components, data permissions components, data dictionary components, core tools components, view manipulation...

4.3CVSS5.2AI score0.00383EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/28 12:0 a.m.3 views

PT-2023-26717 · Jeesite · Jeesite

Name of the Vulnerable Software and Affected Versions: jeesite version 1.2.6 Description: An issue in the delete function in the OaNotifyController class allows authenticated attackers to arbitrarily delete notifications created by Administrators. Recommendations: For jeesite version 1.2.6,...

4.3CVSS4.4AI score0.00383EPSS
Exploits1References5
Patchstack
Patchstack
added 2023/07/18 12:0 a.m.3 views

WordPress Ad Blocker Notify Lite Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)

Software Ad Blocker Notify Lite Type Plugin Vulnerable versions = 2.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ed8dd91a7730 Credits Rafie Muhammad Patchstack...

6.4AI score0.00284EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/07/07 2:18 a.m.2 views

SUSE CVE-2023-37209

A use-after-free condition existed in NotifyOnHistoryReload where a LoadingSessionHistoryEntry object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox 115...

8.8CVSS6.6AI score0.00496EPSS
Exploits0References7
OSV
OSV
added 2023/07/05 10:15 a.m.2 views

UBUNTU-CVE-2023-37209

A use-after-free condition existed in NotifyOnHistoryReload where a LoadingSessionHistoryEntry object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox 115...

8.8CVSS7.3AI score0.00496EPSS
Exploits0References6
Openbugbounty
Openbugbounty
added 2023/06/22 10:18 a.m.8 views

onlinemerker.com Cross Site Scripting vulnerability OBB-3457445

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2023/05/16 8:56 a.m.3 views

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

8.8CVSS6.3AI score0.01303EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/16 8:54 a.m.4 views

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

8.8CVSS6.3AI score0.01303EPSS
Exploits0References4
Openbugbounty
Openbugbounty
added 2023/05/15 8:35 a.m.14 views

contact-stamp.com Cross Site Scripting vulnerability OBB-3337477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2023/05/09 10:2 a.m.4 views

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

8.8CVSS6.3AI score0.01303EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/09 10:1 a.m.3 views

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

8.8CVSS6.3AI score0.01303EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/05/09 9:50 a.m.3 views

xorg-x11-server: XvdiSelectVideoNotify use-after-free

A vulnerability was found in X.Org. This flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This flaw can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding...

8.8CVSS6.3AI score0.01303EPSS
Exploits0References4
OSV
OSV
added 2023/04/13 12:15 p.m.2 views

CVE-2022-44625

Auth. admin+ Stored Cross-Site Scripting' vulnerability in Zephilou Cyklodev WP Notify plugin = 1.2.1 versions...

4.8CVSS5.8AI score0.00392EPSS
Exploits0References1
NVD
NVD
added 2023/04/13 12:15 p.m.9 views

CVE-2022-44625

Auth. admin+ Stored Cross-Site Scripting' vulnerability in Zephilou Cyklodev WP Notify plugin = 1.2.1 versions...

4.8CVSS5AI score0.00392EPSS
Exploits0References1
Prion
Prion
added 2023/04/13 12:15 p.m.15 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting' vulnerability in Zephilou Cyklodev WP Notify plugin = 1.2.1 versions...

4.3CVSS5AI score0.00392EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/13 11:29 a.m.5 views

CVE-2022-44625 WordPress Cyklodev WP Notify Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting' vulnerability in Zephilou Cyklodev WP Notify plugin = 1.2.1 versions...

4.8CVSS5.1AI score0.00392EPSS
Exploits0References1
CVE
CVE
added 2023/04/13 11:29 a.m.63 views

CVE-2022-44625

The CVE CVE-2022-44625 affects the WordPress plugin Zephilou Cyklodev WP Notify (versions

4.8CVSS5AI score0.00392EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/13 12:0 a.m.3 views

WordPress plugin Cyklodev WP Notify 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

4.8CVSS4.9AI score0.00392EPSS
Exploits0References2
Rows per page
Query Builder