Lucene search
+L

3204 matches found

Cvelist
Cvelist
•added 2025/12/31 5:07 p.m.•47 views

CVE-2025-23608 WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omar Mohamed Mohamoud LIVE TV live-tv allows Reflected XSS.This issue affects LIVE TV: from n/a through = 1.2...

7.1CVSS0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 5:07 p.m.•13 views

CVE-2025-23608 WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omar Mohamed Mohamoud LIVE TV live-tv allows Reflected XSS.This issue affects LIVE TV: from n/a through = 1.2...

7.1CVSS8.1AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 5:07 p.m.•45 views

CVE-2025-23608

CVE-2025-23608 corresponds to a Reflected XSS in WordPress LIVE TV plugin (LIVE TV

7.1CVSS8.1AI score0.00216EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 12:31 a.m.•15 views

EUVD-2022-55924

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

6.5CVSS6.3AI score0.00262EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/12/31 12:31 a.m.•13 views

EUVD-2022-55925

JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges...

9.8CVSS6.6AI score0.00424EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•22 views

WordPress plugin LIVE TV 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.1AI score0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•7 views

CVE-2025-23608: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omar Mohamed Mohamoud LIVE TV live-tv allows Reflected XSS.This issue affects LIVE TV: from n/a through = 1.2...

7.1CVSS8.1AI score0.00216EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/30 11:15 p.m.•16 views

CVE-2022-50804

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

8.8CVSS0.00262EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/30 11:15 p.m.•26 views

CVE-2022-50801

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...

5.1CVSS0.0026EPSS
SaveExploits0References6
NVD
NVD
•added 2025/12/30 11:15 p.m.•13 views

CVE-2022-50803

JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges...

9.8CVSS0.00424EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/12/30 10:41 p.m.•6 views

CVE-2022-50804 JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/30 10:41 p.m.•28 views

CVE-2022-50804

The vulnerability CVE-2022-50804 affects JM-DATA ONU JF511-TV version 1.0.67 and is a CSRF flaw that allows an attacker to perform administrative actions on behalf of an authenticated user. The issue is driven by cross-site request forgery in the device’s web interface, enabling unauthorized admi...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2025/12/30 10:41 p.m.•44 views

CVE-2022-50804 JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

8.8CVSS0.00262EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/12/30 10:41 p.m.•36 views

CVE-2022-50801 JM-DATA ONU JF511-TV 1.0.67 Authenticated Stored Cross-Site Scripting (XSS) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...

5.1CVSS0.0026EPSS
SaveExploits0References6
CVE
CVE
•added 2025/12/30 10:41 p.m.•30 views

CVE-2022-50801

CVE-2022-50801 affects the JM-DATA ONU JF511-TV device, version 1.0.67. The issue is an authenticated stored cross-site scripting (XSS) vulnerability that allows an attacker with authenticated access to inject scripts executed in other users’ browsers when they view affected content. The impact i...

5.1CVSS5.7AI score0.0026EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/12/30 10:41 p.m.•5 views

CVE-2022-50803 JM-DATA ONU JF511-TV 1.0.67 Default Credentials Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges...

9.8CVSS5.9AI score0.00424EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/12/30 9:09 p.m.•26 views

CVE-2025-15203

A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

4.8CVSS3.8AI score0.00247EPSS
SaveExploits1References1
CVE
CVE
•added 2025/12/30 5:02 a.m.•29 views

CVE-2025-15221

CVE-2025-15221 affects SohuTV CacheCloud up to version 3.2.0. The flaw resides in the index function of AppDataMigrateController.java (src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java), enabling cross-site scripting. Remote exploitation is possible, and an exploit has bee...

5.4CVSS3.8AI score0.00238EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•16 views

PT-2025-54250

Name of the Vulnerable Software and Affected Versions JM-DATA ONU JF511-TV version 1.0.67 Description The JM-DATA ONU JF511-TV device version 1.0.67 utilizes default credentials, enabling attackers to obtain unauthorized access with administrative privileges. This access allows attackers to fully...

9.8CVSS6.7AI score0.00424EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•12 views

JM-DATA ONU JF511-TV 跨站脚本漏洞

The JM-DATA ONU JF511-TV is an optical cat terminal device from JM-DATA Austria. A cross-site scripting vulnerability exists in JM-DATA ONU JF511-TV version 1.0.67, which stems from an authenticated stored cross-site scripting vulnerability that could lead to malicious script injection...

5.1CVSS5.9AI score0.0026EPSS
SaveExploits0References6
Rows per page
Query Builder