Lucene search
+L

2009 matches found

Vulnrichment
Vulnrichment
•added 2022/04/26 6:36 p.m.•8 views

CVE-2022-27854 WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher role via &wpttestpagesubmitbuttoncaption parameter...

5.4CVSS5.2AI score0.00583EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/26 6:03 p.m.•117 views

CVE-2021-36867

Summary of CVE-2021-36867 (WordPress plugin: Psychological tests & quizzes

5.4CVSS5.2AI score0.00571EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/26 6:03 p.m.•40 views

CVE-2021-36867 WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher user rights...

5.4CVSS5.5AI score0.00571EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/26 1:33 p.m.•16 views

CVE-2022-27854

Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher role via testpagesubmitbuttoncaption parameter...

5.4CVSS5.6AI score0.00583EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2022/04/26 12:00 a.m.•17 views

WordPress plugin Psychological tests & quizzes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Psychological tests...

5.4CVSS5.5AI score0.00583EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/26 12:00 a.m.•3 views

CVE-2022-27854: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher role via &wpttestpagesubmitbuttoncaption parameter...

5.4CVSS6AI score0.00583EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/26 12:00 a.m.•19 views

WordPress plugin Psychological tests & quizzes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00571EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/04/26 12:00 a.m.•34 views

WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Psychological tests & quizzes plugin versions = 0.21.19. Solution No patched version...

5.4CVSS3AI score0.00571EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/04/26 12:00 a.m.•27 views

WordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress Psychological tests & quizzes plugin versions = 0.21.19. Solution No patched version is available...

5.4CVSS2.2AI score0.00583EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/26 12:00 a.m.•5 views

CVE-2021-36867: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin = 0.21.19 on WordPress possible for users with contributor or higher user rights...

5.4CVSS6AI score0.00571EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/24 10:02 p.m.•14 views

GSD-2022-1002011 PCI: endpoint: Fix alignment fault error in copy tests

PCI: endpoint: Fix alignment fault error in copy tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/04/24 9:38 p.m.•17 views

GSD-2022-1001728 PCI: endpoint: Fix alignment fault error in copy tests

PCI: endpoint: Fix alignment fault error in copy tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/04/24 9:10 p.m.•25 views

GSD-2022-1001404 PCI: endpoint: Fix alignment fault error in copy tests

PCI: endpoint: Fix alignment fault error in copy tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/04/24 8:43 p.m.•18 views

GSD-2022-1001068 PCI: endpoint: Fix alignment fault error in copy tests

PCI: endpoint: Fix alignment fault error in copy tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2022/04/22 9:23 p.m.•680 views

Exploit for Path Traversal in Wso2 Api_Manager

nmap-CVE-2022-29464 nmap-CVE-2022-29464 is an NSE script for d...

10CVSS8.4AI score0.99999EPSS
SaveExploits25
CNVD
CNVD
•added 2022/04/18 12:00 a.m.•88 views

SWHKD has unspecified vulnerabilities

SWHKD is a hotkey daemon made with Rust that is independent of the display protocol. SWHKD has security vulnerabilities that can be exploited by attackers to perform arbitrary file presence tests with the -c option...

3.3CVSS2.9AI score0.00453EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/14 5:15 p.m.•8 views

CVE-2022-27814

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

3.3CVSS5.9AI score0.00453EPSS
SaveExploits1References3
CVE
CVE
•added 2022/04/14 4:32 p.m.•101 views

CVE-2022-27814

CVE-2022-27814 relates to SWHKD 1.1.5, where the -c option allows arbitrary file-existence tests. The connected sources confirm the vulnerable component is the SWHKD daemon and the condition is a flaw in the -c flag that enables probing for file presence, implying local, low-complexity exploitati...

3.3CVSS4.3AI score0.00453EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/04/14 4:32 p.m.•52 views

CVE-2022-27814

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

4.5AI score0.00453EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/14 12:00 a.m.•2 views

CVE-2022-27814: Observable Discrepancy

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

3.3CVSS5.6AI score0.00453EPSS
SaveExploits1References2
Rows per page
Query Builder