Lucene search
+L

8 matches found

EUVD
EUVD
•added 2026/07/27 1:59 p.m.•21 views

EUVD-2026-49243

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/10 12:00 a.m.•28 views

PT-2026-48558

Name of the Vulnerable Software and Affected Versions Prisma Access Agent on Linux affected versions not specified Description A privilege escalation issue in the Prisma Access Agent app on Linux devices allows a local user to execute code with elevated privileges. This is caused by the incorrect...

8.5CVSS7.8AI score0.00109EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•2 views

CVE-2025-9899: Cross-Site Request Forgery (CSRF)

The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the feedsave function. This makes it possible for...

6.1CVSS5.5AI score0.00124EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2021-41116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is an open source dependency manager for the PHP language. In affected versions windows users running Composer to install untrusted dependencies are...

9.8CVSS7.6AI score0.02825EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-2387: Improper Neutralization of Special Elements used in an SQL Command

The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection via the ‘integrationid’ parameter in all versions up to, and including, 1.82.0 due to insufficient escaping on the user supplied paramete...

6.1CVSS6AI score0.01639EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•3 views

CVE-2023-50853: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nasirahmed Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms.This issue affects Advanced Form Integration – Connect WooCommerce and Contact For...

7.6CVSS7.2AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/23 12:00 a.m.•4 views

CVE-2022-47173: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration plugin = 1.62.0 versions...

5.9CVSS5.8AI score0.00392EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 6:00 a.m.•10 views

SUSE CVE-2010-0540

Cross-site request forgery CSRF vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings...

6CVSS7.4AI score0.01275EPSS
SaveExploits0References10
Rows per page
Query Builder