Lucene search
+L

22 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-8160

Malware in sbrugna...

3.5CVSS6.4AI score0.01046EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-49773

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.00293EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/12 12:00 a.m.•18 views

Drupal Open Social module < 12.3.11,12.4.0-12.4.9 - Unauthenticated Multiple Vulnerabilities vulnerability

Unauthenticated Multiple Vulnerabilities vulnerability discovered by Robert Ragas robertragas in WordPress Module Open Social versions 12.3.11,12.4.0-12.4.9...

8.1CVSS7AI score0.00405EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/12/11 12:00 a.m.•16 views

Drupal Open Social module 11.8.0-12.3.9,12.4.0-12.4.8 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by corn696 in WordPress Module Open Social versions 11.8.0-12.3.9,12.4.0-12.4.8...

5.3CVSS7AI score0.00303EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2024/10/02 6:15 a.m.•13 views

CVE-2024-9174

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

6.9CVSS5.4AI score0.00293EPSS
SaveExploits0References3
OSV
OSV
•added 2024/10/02 6:15 a.m.•22 views

CVE-2024-9174

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

5.4CVSS5.8AI score0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/02 5:56 a.m.•36 views

CVE-2024-9174 Stored HTML Injection in Hubshare social module

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

6.9CVSS0.00293EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/02 5:56 a.m.•72 views

CVE-2024-9174

CVE-2024-9174 affects M-Files Hubshare (Social Module) prior to version 5.0.8.6. It is a stored HTML injection vulnerability that allows an authenticated user to spoof the UI. Root cause: HTML injection in the Social Module; impact includes UI spoofing. The PT-Security advisory corroborates the a...

6.9CVSS6.7AI score0.00293EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/02 5:56 a.m.•23 views

CVE-2024-9174 Stored HTML Injection in Hubshare social module

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

6.9CVSS6.7AI score0.00293EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/02 12:00 a.m.•4 views

CVE-2024-9174: Improper Neutralization of Input During Web Page Generation

Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI...

6.9CVSS5.7AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/01 12:00 a.m.•18 views

PT-2024-39472

Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.8.6 Description The issue allows an authenticated user to spoof the UI through stored HTML injection in the Social Module. Recommendations For versions prior to 5.0.8.6, update to version 5.0.8.6 or later...

6.9CVSS6.9AI score0.00293EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2024/09/04 12:00 a.m.•15 views

Drupal Open Social module < 12.3.8,12.4.0-12.4.4,13.0.0-13.0.0-alpha10 - Unauthenticated Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack vulnerability discovered by vnech in WordPress Module Open Social versions 12.3.8,12.4.0-12.4.4,13.0.0-13.0.0-alpha10...

7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/09/04 12:00 a.m.•12 views

Drupal Open Social module < 12.3.8,12.4.0-12.4.4,13.0.0-13.0.0-alpha10 - Authenticated Multiple Vulnerabilities

Authenticated Multiple Vulnerabilities discovered by Thiago Régis in WordPress Module Open Social versions 12.3.8,12.4.0-12.4.4,13.0.0-13.0.0-alpha10...

7AI score
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2024/05/24 6:15 a.m.•8 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.4AI score0.00306EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/24 6:15 a.m.•16 views

CVE-2024-5142

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

5.4CVSS5.8AI score0.00306EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/24 5:58 a.m.•27 views

CVE-2024-5142 XSS in Hubshare's social module

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.7AI score0.00306EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•2 views

CVE-2024-5142: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting vulnerability in Social Module in M-Files Hubshare before version 5.0.6.0 allows authenticated attacker to run scripts in other users browser...

7CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/24 12:00 a.m.•13 views

PT-2024-34626

Name of the Vulnerable Software and Affected Versions M-Files Hubshare versions prior to 5.0.6.0 Description The issue allows an authenticated attacker to run scripts in other users' browsers due to a Stored Cross-Site Scripting vulnerability in the Social Module. Recommendations For versions pri...

7CVSS5.3AI score0.00306EPSS
SaveExploits0References9
NVD
NVD
•added 2014/10/17 2:55 p.m.•31 views

CVE-2014-8319

Cross-site scripting XSS vulnerability in the easysocialadminsummary function in the Easy Social module 7.x-2.x before 7.x-2.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a block title...

3.5CVSS5.3AI score0.01046EPSS
SaveExploits0References6
Prion
Prion
•added 2014/10/17 2:55 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in the easysocialadminsummary function in the Easy Social module 7.x-2.x before 7.x-2.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a block title...

3.5CVSS5.7AI score0.01046EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder