Lucene search
+L

3715 matches found

CNVD
CNVD
•added 2017/12/04 12:00 a.m.•48 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-38250)

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases, or use WordPress as a content management system CMS. A cross-site scripting vulnerability exists in WordPress before 4.9.1. The vulnerability...

5.4CVSS6.1AI score0.01995EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/12/02 6:29 a.m.•38 views

CVE-2017-17094

wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL...

5.4CVSS6.8AI score0.01995EPSS
SaveExploits0References4
Prion
Prion
•added 2017/12/02 6:29 a.m.•23 views

Cross site scripting

wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL...

3.5CVSS5.2AI score0.01995EPSS
SaveExploits0References7Affected Software2
OSV
OSV
•added 2017/12/02 6:29 a.m.•27 views

CVE-2017-17094

wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL...

5.4CVSS5.7AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2017/12/02 6:00 a.m.•46 views

CVE-2017-17094

wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL...

6.3AI score0.01995EPSS
SaveExploits0References7
CVE
CVE
•added 2017/12/02 6:00 a.m.•214 views

CVE-2017-17094

CVE-2017-17094 affects WordPress core: wp-includes/feed.php in WordPress

5.4CVSS6.2AI score0.01995EPSS
SaveExploits0References7Affected Software1
FreeBSD
FreeBSD
•added 2017/11/29 12:00 a.m.•16 views

wordpress -- multiple issues

wordpress developers reports: Use a properly generated hash for the newbloguser key instead of a determinate substring. Add escaping to the language attributes used on html elements. Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds. Remove the ability to upload...

0.4AI score
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2017/11/29 12:00 a.m.•42 views

WordPress 1.5.0-4.9 - RSS and Atom Feed Escaping

...

3.5CVSS2.4AI score0.01995EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2017/11/29 12:00 a.m.•117 views

WordPress 1.5.0-4.9 - RSS and Atom Feed Escaping

The attributes of enclosures are not correctly escaped in RSS and Atom feeds in wp-includes/feed.php file, which might allow an attacker to exploit XSS via a crafted URL. Solution Update WordPress to v4.9.1...

5.4CVSS4AI score0.01995EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
•added 2017/11/27 12:00 a.m.•30 views

Apache Roller < 5.0.2 Multiple Vulnerabilities

Apache Roller is prone to code execution and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.8CVSS6.3AI score0.81068EPSS
SaveExploits7References5
CNVD
CNVD
•added 2017/11/21 12:00 a.m.•13 views

Tiny Tiny RSS SQL Injection Vulnerability

Tiny Tiny RSS is an open source RSS Really Simple Syndication reader written in PHP. forgotpass component is one of the password recovery component. A SQL injection vulnerability exists in the classes/handler/public.php file of the forgotpass component in Tiny Tiny RSS version 17.4. A remote...

9.8CVSS8.4AI score0.01478EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/20 4:29 p.m.•22 views

Sql injection

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

7.5CVSS9.8AI score0.01478EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2017/11/20 4:29 p.m.•31 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS7.2AI score0.01478EPSS
SaveExploits0References3
NVD
NVD
•added 2017/11/20 4:29 p.m.•30 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS9.9AI score0.01478EPSS
SaveExploits0References2
OSV
OSV
•added 2017/11/20 4:29 p.m.•15 views

DEBIAN-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS8.1AI score0.01478EPSS
SaveExploits0References1
OSV
OSV
•added 2017/11/20 4:29 p.m.•11 views

UBUNTU-CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS5.9AI score0.01478EPSS
SaveExploits0References4
OSV
OSV
•added 2017/11/20 4:29 p.m.•12 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS9.9AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2017/11/20 4:00 p.m.•31 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.9AI score0.01478EPSS
SaveExploits0References2
CVE
CVE
•added 2017/11/20 4:00 p.m.•64 views

CVE-2017-16896

CVE-2017-16896 affects Tiny Tiny RSS 17.4, specifically the forgotpass component’s login parameter. Multiple connected entries confirm a SQL injection in classes/handler/public.php, producing high/severe impact (NVD metrics: CVSSv2 7.5 MED/ HIGH; CVSSv3 9.8 CRITICAL) with network reach and no aut...

9.8CVSS9.8AI score0.01478EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2017/11/20 4:00 p.m.•43 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS9.9AI score0.01478EPSS
SaveExploits0
Rows per page
Query Builder