Lucene search
K

43 matches found

vulnersOsv
vulnersOsv
added 2021/01/06 5:15 p.m.1 views

buildbot-badges (>=1.7.0 <=1.8.2), cico (>=0.1.0 <=0.1.8) +9 more potentially affected by CVE-2021-21236 via cairosvg (>=0.5.0 <=2.5.0)

cairosvg PYPI version =0.5.0, =1.7.0, =0.1.0, =0.1.0, =2.11.0, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 - wiking =2.2.1 Source cves: CVE-2021-21236 Source advisory: OSV:PYSEC-2021-5...

5.7CVSS6.6AI score0.00138EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2021/01/06 4:57 p.m.2 views

buildbot-badges (>=1.7.0 <=1.8.2), cico (>=0.1.0 <=0.1.8) +9 more potentially affected by CVE-2021-21236 via cairosvg (>=0.5.0 <=2.5.0)

cairosvg PYPI version =0.5.0, =1.7.0, =0.1.0, =0.1.0, =2.11.0, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 - wiking =2.2.1 Source cves: CVE-2021-21236 Source advisory: OSV:GHSA-HQ37-853P-G5CF...

5.7CVSS6.6AI score0.00138EPSS
Exploits1
OSV
OSV
added 2020/06/19 7:15 p.m.12 views

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

6.1CVSS6.2AI score
Exploits0References1
NVD
NVD
added 2020/06/19 7:15 p.m.11 views

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

6.1CVSS0.00359EPSS
Exploits0References1
Prion
Prion
added 2020/06/19 7:15 p.m.15 views

Cross site scripting

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

4.3CVSS6AI score0.00359EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/06/19 6:8 p.m.38 views

CVE-2017-18882

Mattermost Server contains a cross-site scripting (XSS) vulnerability (CVE-2017-18882) affecting versions prior to 4.3.0, 4.2.1, and 4.1.2. Descriptions across sources attribute the issue to improper handling/validation of OpenGraph data supplied by the user, enabling an attacker to inject and ex...

6.1CVSS5.9AI score0.00359EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/19 6:8 p.m.11 views

CVE-2017-18882

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data...

6AI score0.00359EPSS
Exploits0References1
NVD
NVD
added 2020/06/19 5:15 p.m.8 views

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

7.5CVSS0.00389EPSS
Exploits0References1
OSV
OSV
added 2020/06/19 5:15 p.m.9 views

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

7.5CVSS7AI score
Exploits0References1
Prion
Prion
added 2020/06/19 5:15 p.m.16 views

Design/Logic Flaw

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

5CVSS7.3AI score0.00389EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/06/19 4:29 p.m.37 views

CVE-2019-20880

Mattermost Server vulnerable to denial-of-service via OpenGraph handling. Affected versions: before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Root cause described as OpenGraph processing leading to memory consumption (DoS). No exploitation details or attacker vectors provided in the documents. No remediat...

7.5CVSS7.3AI score0.00389EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/19 4:29 p.m.13 views

CVE-2019-20880

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. It allows attackers to cause a denial of service memory consumption via OpenGraph...

7.4AI score0.00389EPSS
Exploits0References1
Patchstack
Patchstack
added 2017/12/04 12:0 a.m.10 views

WordPress Content Cards Plugin <= 0.9.6 - Cross-Site Scripting vulnerability

A cross site scripting vulnerability was found in WordPress Content Cards plugin in 0.9.6 version. This vulnerability is related to OpenGraph Data Handler functionality. The data is not sanitized properly and it leads to a cross site scripting vulnerability. Solution Update the plugin...

1.6AI score
Exploits0References2Affected Software1
Prion
Prion
added 2017/12/03 7:29 p.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

4.3CVSS6.1AI score0.00318EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/12/03 7:29 p.m.6 views

CVE-2017-17096

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

6.1CVSS6.2AI score0.00318EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/12/03 7:0 p.m.10 views

CVE-2017-17096

Cross-site scripting XSS vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data...

6.2AI score0.00318EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2014/08/01 10:58 a.m.10 views

Facebook Opengraph Meta <= 1.0 - SQL Injection

The facebook-opengraph-meta-plugin WordPress plugin was affected by a SQL Injection security vulnerability...

2.8AI score
Exploits0References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

WordPress Facebook Opengraph Meta Plugin plugin <= 1.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin = 1.0 SQL Injection Vulnerability Date: 2011-09-03 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/facebook-opengraph-meta-plugin.z...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2011/09/03 12:0 a.m.22 views

WordPress Facebook Opengraph Meta 1.0 SQL Injection

Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if $page $totalpages $page=$totalpages; $start = $limit$page -...

0.6AI score
Exploits0
exploitpack
exploitpack
added 2011/09/03 12:0 a.m.15 views

WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection

WordPress Plugin Facebook Opengraph Meta 1.0 - SQL Injection Exploit Title: WordPress Facebook Opengraph Meta Plugin plugin getvar"SELECT COUNT AS count FROM $wpdb-postmeta WHERE metakey = 'OgMeta'"; $count = $result'count'; if $count 0 $totalpages = ceil$count/$limit; else $totalpages = 0; if...

0.6AI score
Exploits0
Rows per page
Query Builder