Lucene search
+L

8894 matches found

NVD
NVD
added 2023/05/26 1:15 p.m.16 views

CVE-2023-22693

Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...

8.8CVSS5.8AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/26 12:09 p.m.20 views

CVE-2023-22693 WordPress WP Google Tag Manager Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...

4.3CVSS7AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/26 12:09 p.m.51 views

CVE-2023-22693

The CVE-2023-22693 entry concerns the WordPress WP Google Tag Manager plugin, affected versions being

8.8CVSS6.4AI score0.00256EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/26 12:09 p.m.22 views

CVE-2023-22693 WordPress WP Google Tag Manager Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in conlabzgmbh WP Google Tag Manager plugin = 1.1 versions...

4.3CVSS9AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/26 12:00 a.m.6 views

WordPress plugin WP Google Tag Manager 跨站请求伪造漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress plugin WP Google Tag Manager version 1.1 and prior versions. The vulnerability stem...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/26 12:00 a.m.9 views

PT-2023-18638 · Conlabzgmbh · Conlabzgmbh Wp Google Tag Manager

Name of the Vulnerable Software and Affected Versions: conlabzgmbh WP Google Tag Manager plugin versions = 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

8.8CVSS8.5AI score0.00256EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/25 5:15 p.m.11 views

CVE-2023-33751

A stored cross-site scripting XSS vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php...

5.4CVSS6.2AI score0.004EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/05/25 12:00 a.m.24 views

CVE-2023-33751

A stored cross-site scripting XSS vulnerability in mipjz v5.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter at /app/tag/controller/ApiAdminTagCategory.php...

5.4AI score0.004EPSS
SaveExploits1References1
Veracode
Veracode
added 2023/05/24 6:04 a.m.9 views

Cross-Site Request Forgery (CSRF)

Tag Profiler Plugin is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists because the http endpoint doesn't require POST requests which allows an attacker to perform cross-site request forgery attacks...

4.3CVSS6.6AI score0.003EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2023/05/24 5:56 a.m.9 views

Improper Access Control

Tag Profiler Plugin is vulnerable to Improper Access Control. The vulnerability exists due to lack of permission checks on http endpoints which allows an attacker to gain read access and reset the profile statistics...

4.3CVSS6.6AI score0.00425EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/24 12:00 a.m.8 views

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

5.4CVSS6AI score0.00522EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/05/23 2:15 a.m.7 views

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

5.4CVSS6.6AI score0.00613EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/05/23 2:15 a.m.32 views

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

5.4CVSS5.2AI score0.00613EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.11 views

PT-2023-21422 · Unknown +1 · Vk Blocks Pro +1

Name of the Vulnerable Software and Affected Versions: VK Blocks versions 1.53.0.1 and earlier VK Blocks Pro versions 1.53.0.1 and earlier Description: A cross-site scripting issue in the Tag edit function allows a remote authenticated attacker to inject an arbitrary script. This enables the...

5.4CVSS8.9AI score0.00613EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/05/23 12:00 a.m.39 views

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

5.4AI score0.00613EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/23 12:00 a.m.21 views

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

5.4CVSS6.5AI score
SaveExploits0References4
OSV
OSV
added 2023/05/19 3:15 p.m.8 views

AZL-44907 CVE-2023-30774 affecting package openjpeg2 2.3.1-12

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

5.5CVSS6.9AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/19 3:15 p.m.4 views

DEBIAN-CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

5.5CVSS6.8AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/19 3:15 p.m.7 views

UBUNTU-CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

5.5CVSS7.3AI score0.0051EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/18 12:00 a.m.9 views

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK 4.2.1 and earlier versions, which stems from a...

7.5CVSS7.5AI score0.00481EPSS
SaveExploits0References3
Rows per page
Query Builder