Lucene search
+L

1093 matches found

CVE
CVE
•added 2023/08/17 8:25 a.m.•62 views

CVE-2023-30874

CVE-2023-30874 corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress GPS Plotter plugin by St. Pete Design, affecting versions

5.9CVSS6.5AI score0.00392EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2023/08/14 12:00 a.m.•405 views

Phoenix Contact TC Cloud / TC Router 2.x XSS / Memory Consumption

St. Pölten UAS ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Phoenix Contact TC Cloud Client 1002-4G, | TC Router 3002T-4G, Cloud Client 1101T-TX/TX vulnerable version| 2.07.2, 2.07.2, 2.06.10 fixed version| 2.07.2, 2.07.2...

9.6CVSS7.1AI score0.01794EPSS
SaveExploits1
Openbugbounty
Openbugbounty
•added 2023/07/15 7:35 a.m.•16 views

ville-st-etienne-remiremont.fr Cross Site Scripting vulnerability OBB-3516825

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/07/13 10:06 a.m.•12 views

st-paul-theater.com Cross Site Scripting vulnerability OBB-3511531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/07/05 3:05 p.m.•6 views

st-agro.com Cross Site Scripting vulnerability OBB-3479102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/06/28 7:07 p.m.•7 views

stjohnonbethalgreen.org Cross Site Scripting vulnerability OBB-3474577

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Ubuntu
Ubuntu
•added 2023/06/22 12:54 p.m.•95 views

USN-6186-1: Linux kernel vulnerabilities

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...

7.8CVSS7.1AI score0.16525EPSS
SaveExploits8
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•14 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

6.4CVSS6AI score0.0049EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•15 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to deficiencies in the validation of user-input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of Rockwell Automation’s ArmorStart ST engine controllers is related to deficiencies in the validation of user input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

7.5CVSS6.8AI score0.0049EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•17 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

5.9CVSS5.9AI score0.0062EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•17 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

5.9CVSS5.9AI score0.0062EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/12 8:15 p.m.•12 views

CVE-2023-33625

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbcsystem function...

9.8CVSS5.8AI score0.33154EPSS
SaveExploits2References4
Prion
Prion
•added 2023/06/12 8:15 p.m.•25 views

Command injection

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbcsystem function...

7.5CVSS9.8AI score0.33154EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2023/06/12 12:00 a.m.•45 views

CVE-2023-33625

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbcsystem function...

10AI score0.33154EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/06/12 12:00 a.m.•12 views

D-Link DIR-600 命令注入漏洞

The D-Link DIR-600 is a wireless router from China's AUO D-Link. The D-Link DIR-600 suffers from a command injection vulnerability that stems from the ST parameter in the lxmldbcsystem function failing to properly filter construct command special characters, commands, and so on. An attacker can...

9.8CVSS7.9AI score0.33154EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
•added 2023/06/12 12:00 a.m.•14 views

CVE-2023-33625

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbcsystem function...

8.2AI score0.33154EPSS
SaveExploits2References4
Openbugbounty
Openbugbounty
•added 2023/06/10 5:37 p.m.•16 views

stjohnsrichmond.org Cross Site Scripting vulnerability OBB-3408502

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/06/07 12:00 a.m.•24 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

5.9CVSS5.9AI score0.0062EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/07 12:00 a.m.•24 views

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

7.5CVSS6.8AI score0.0049EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2023/05/29 8:32 a.m.•12 views

college-st-firmin.fr Cross Site Scripting vulnerability OBB-3367196

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Rows per page
Query Builder