Lucene search
+L

6129 matches found

Cvelist
Cvelist
•added 2024/04/15 7:04 a.m.•33 views

CVE-2024-32140 WordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through = 1.4.4...

6.5CVSS6.6AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/15 7:04 a.m.•21 views

CVE-2024-32140 WordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through = 1.4.4...

6.5CVSS5.2AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/15 7:04 a.m.•97 views

CVE-2024-32140

CVE-2024-32140 : Stored Cross-Site Scripting in Libsyn Publisher Hub (improper neutralization of input during web page generation). Affected: Libsyn Publisher Hub up to version 1.4.4. The provided documents do not specify an available patch/mitigation or explicit exploitation details.

6.5CVSS5.9AI score0.00331EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•18 views

WordPress Plugin Podlove Podcast Publisher SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin...

8.8CVSS7.7AI score0.00963EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•3 views

CVE-2024-32140: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through = 1.4.4...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•22 views

PT-2024-24434 · Unknown · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher versions through 4.0.12 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This allows for potential exploitation ...

8.8CVSS8AI score0.00963EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•3 views

CVE-2024-32141: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through = 1.4.4...

4.3CVSS5.8AI score0.00214EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•3 views

CVE-2024-32139: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.12...

8.8CVSS5.8AI score0.00963EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•5 views

PT-2024-24436

Name of the Vulnerable Software and Affected Versions Libsyn Publisher Hub versions 1.4.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in Libsyn Libsyn Publisher Hub...

6.5CVSS0.00331EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•19 views

WordPress Plugin Libsyn Publisher Hub 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS6AI score0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•20 views

WordPress Plugin Libsyn Publisher Hub 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Libsyn Publisher H...

4.3CVSS6.5AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•27 views

PT-2024-24437 · Libsyn · Libsyn Publisher Hub

Name of the Vulnerable Software and Affected Versions: Libsyn Publisher Hub versions 1.4.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

4.3CVSS6.5AI score0.00214EPSS
SaveExploits0References4
Mend
Mend
•added 2024/04/14 1:02 p.m.•1 views

MSC-2024-1398

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 1:02 p.m.•2 views

MSC-2024-1410

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 1:02 p.m.•2 views

MSC-2024-1406

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 12:23 p.m.•2 views

MSC-2024-1394

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

8.7CVSS5.7AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 12:22 p.m.•2 views

MSC-2024-1396

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

8.7CVSS5.7AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 11:12 a.m.•2 views

MSC-2024-1390

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 11:12 a.m.•1 views

MSC-2024-1391

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2024/04/14 6:30 a.m.•1 views

MSC-2024-1377

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

8.7CVSS5.7AI score
SaveExploits0References1
Rows per page
Query Builder