Lucene search
+L

445 matches found

NVD
NVD
added 2020/05/28 9:15 p.m.13 views

CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.4CVSS6.7AI score0.01508EPSS
SaveExploits0References5
OSV
OSV
added 2020/05/28 9:15 p.m.3 views

DEBIAN-CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.1CVSS6.6AI score0.01508EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/28 9:15 p.m.25 views

CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.1CVSS6.4AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2020/05/28 9:15 p.m.19 views

CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.4CVSS6.7AI score0.01508EPSS
SaveExploits0References4
OSV
OSV
added 2020/05/28 9:15 p.m.1 views

UBUNTU-CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.4CVSS6AI score0.01508EPSS
SaveExploits0References5
CVE
CVE
added 2020/05/28 9:10 p.m.173 views

CVE-2020-11082

In Kaminari, versions prior to 1.2.1 are affected by a vulnerability that could allow an attacker to inject arbitrary code into pages with pagination links. This issue has been fixed in version 1.2.1, per multiple connected advisories (e.g., Debian DSA/DSA-2763-1 and related Nessus/OpenVAS entrie...

6.4CVSS6.5AI score0.01508EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2020/05/28 9:10 p.m.26 views

CVE-2020-11082 Cross-Site Scripting in Kaminari

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.4CVSS6.6AI score0.01508EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2020/05/28 9:10 p.m.47 views

CVE-2020-11082

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

6.4CVSS6.4AI score0.01508EPSS
SaveExploits0
OSV
OSV
added 2020/05/28 9:10 p.m.24 views

GHSA-R5JW-62XG-J433 Cross-Site Scripting in Kaminari

Impact In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. Releases The 1.2.1 gem including the patch has already been released. All past released versions are affected by this...

6.4CVSS6.6AI score0.01508EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2020/05/28 9:10 p.m.97 views

Cross-Site Scripting in Kaminari

Impact In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. Releases The 1.2.1 gem including the patch has already been released. All past released versions are affected by this...

6.4CVSS2.3AI score0.01508EPSS
SaveExploits0References8Affected Software1
RubySec
RubySec
added 2020/05/28 12:0 a.m.41 views

Cross-Site Scripting in Kaminari via `original_script_name` parameter

Impact There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code into pages with pagination links. For example, an attacker could craft pagination links that link to other domain or host:...

6.4CVSS7AI score0.01508EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2020/05/26 11:0 p.m.2 views

Cross-site Scripting (XSS)

Overview kaminari is a Scope & Engine based, clean, powerful, agnostic, customizable and sophisticated paginator for Rails 4+. Affected versions of this package are vulnerable to Cross-site Scripting XSS. An attacker can inject arbitrary code into pages with pagination links. PoC For example, an...

6.4CVSS5.5AI score0.01508EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2020/04/22 12:0 a.m.34 views

kaminari -- potential XSS vulnerability

Kaminari Security Advisories: There was a vulnerability in versions of Kaminari that would allow an attacker to inject arbitrary code into pages with pagination links. The 1.2.1 gem including the patch has already been released. All past released versions are affected by this vulnerability...

6.4CVSS5AI score0.01508EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2020/01/20 5:0 p.m.21 views

All Vulnerabilities for izito.com Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| izito.com ---|--- Open Bug Bounty...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2019/08/22 12:0 a.m.8 views

WordPress pagination plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pagination is a custom pagination plugin used in it. A cross-site scripting vulnerability exists in the WordPress pagination plugi...

6.1CVSS6.2AI score0.01688EPSS
SaveExploits1References1
OSV
OSV
added 2019/08/20 4:15 p.m.6 views

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

6.1CVSS5.8AI score0.01688EPSS
SaveExploits1References1
NVD
NVD
added 2019/08/20 4:15 p.m.21 views

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

6.1CVSS6.1AI score0.01688EPSS
SaveExploits1References1
Prion
Prion
added 2019/08/20 4:15 p.m.13 views

Cross site scripting

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

4.3CVSS6AI score0.01688EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/08/20 3:30 p.m.23 views

CVE-2017-18527

The pagination plugin before 1.0.7 for WordPress has multiple XSS issues...

6.1AI score0.01688EPSS
SaveExploits1References1
CVE
CVE
added 2019/08/20 3:30 p.m.77 views

CVE-2017-18527

CVE-2017-18527 affects the WordPress Pagination plugin by BestWebSoft (versions

6.1CVSS6AI score0.01688EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder