Lucene search
+L

13858 matches found

CNNVD
CNNVD
added 2025/01/24 12:0 a.m.7 views

Telstra Smart Modem 安全漏洞

Telstra Smart Modem is a smart modem from Telstra. A security vulnerability exists in Telstra Smart Modem Gen 2 20250115 and earlier versions, which stems from the parameter Content-Disposition of the component HTTP Header Handler can lead to injection...

6.9CVSS5.5AI score0.00464EPSS
SaveExploits0References5
NVD
NVD
added 2025/01/21 2:15 p.m.21 views

CVE-2025-22710

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...

7.6CVSS0.00817EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/21 1:57 p.m.12 views

CVE-2025-22710 WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...

7.6CVSS8.9AI score0.00817EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/21 1:57 p.m.38 views

CVE-2025-22710 WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce allows Blind SQL Injection.This issue affects Smart Manager: from n/a through = 8.52.0...

7.6CVSS0.00817EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/21 1:57 p.m.112 views

CVE-2025-22710

CVE-2025-22710 is an SQL Injection (Improper Neutralization of Special Elements in SQL Commands) affecting StoreApps Smart Manager for WordPress, with affected range listed as Smart Manager: from n/a through 8.52.0. The CVE description specifies a Blind SQL Injection vulnerability and a CVSS v3.1...

7.6CVSS7.3AI score0.00817EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.7 views

WordPress plugin Smart Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS8.9AI score0.00817EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/01/20 12:0 a.m.5 views

Fuji Electric Alpha5 SMART Stack Buffer Overflow Vulnerability

The Fuji Electric Alpha5 SMART is a high-performance AC servo system designed for high-speed and high-precision control. A stack buffer overflow vulnerability exists in the Fuji Electric Alpha5 SMART. The vulnerability is due to the system failing to perform proper boundary checks on input data...

8.5CVSS7.8AI score0.00341EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.9 views

The vulnerability of the SmartCardReader class in the Smart Cards for Windows service (formerly known as Smart Card Resource Manager) on Windows operating systems allows a malicious individual to disclose protected information.

The vulnerability of the SmartCardReader class in the Smart Cards for Windows service previously known as Smart Card Resource Manager in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive...

2.4CVSS7.6AI score0.00704EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/01/17 12:21 a.m.24 views

CVE-2024-34579 Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow

Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

8.5CVSS0.00341EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.7 views

Fuji Electric Alpha5 SMART 安全漏洞

The Fuji Electric Alpha5 SMART is a high-performance AC servo system designed for high-speed and high-precision control. A stack buffer overflow vulnerability exists in the Fuji Electric Alpha5 SMART. The vulnerability is due to the system failing to perform proper boundary checks on input data...

8.5CVSS7.7AI score0.00341EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.8 views

WordPress WP Smart Tooltip plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP Smart Tooltip versions = 1.0.0...

6.5CVSS6.1AI score0.00258EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/15 1:39 p.m.8 views

WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin Smart Manager versions = 8.52.0...

7.6CVSS8.1AI score0.00817EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2025/01/15 10:15 a.m.20 views

CVE-2024-12818

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.0027EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/15 9:25 a.m.52 views

CVE-2024-12818

CVE-2024-12818 refers to a Stored XSS in the WP Smart TV WordPress plugin via the tv-video-player shortcode, affecting all versions up to and including 2.1.8. The vulnerability stems from insufficient input sanitization and output escaping of user-supplied shortcode attributes, allowing an authen...

6.4CVSS5.7AI score0.0027EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/15 9:25 a.m.7 views

CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS5.8AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/15 9:25 a.m.28 views

CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/15 12:0 a.m.7 views

WordPress plugin WP Smart TV 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.5AI score0.0027EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/01/14 11:15 p.m.6 views

WordPress WP Smart TV plugin <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin WP Smart TV versions = 2.1.8...

6.4CVSS5.7AI score0.0027EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/01/14 6:15 p.m.3 views

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

2.4CVSS7.3AI score0.00704EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/14 6:15 p.m.10 views

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

2.4CVSS0.00704EPSS
SaveExploits0References1
Rows per page
Query Builder