Lucene search
+L

3293 matches found

osv_cve
osv_cve
•added 2023/11/23 3:15 p.m.•24 views

CVE-2023-41791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed users with low privileges to introduce Javascript executables via a translation string that could affect the integrity...

5.4CVSS5.8AI score0.00452EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/23 2:41 p.m.•45 views

CVE-2023-41791 Lack of Authorization and Stored XSS Via Translation Abuse

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed users with low privileges to introduce Javascript executables via a translation string that could affect the integrity...

8.4CVSS7.8AI score0.00452EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/23 12:00 a.m.•24 views

PT-2023-28094 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 700 through 773 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This allows users with low privileges to introduce Javascript...

8.4CVSS5.2AI score0.00452EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/23 12:00 a.m.•4 views

CVE-2023-41791: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed users with low privileges to introduce Javascript executables via a translation string that could affect the integrity...

8.4CVSS6AI score0.00452EPSS
SaveExploits0References3
NVD
NVD
•added 2023/11/22 2:15 p.m.•37 views

CVE-2023-27446

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...

8.8CVSS0.00312EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/22 2:15 p.m.•18 views

CVE-2023-27446

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...

8.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/22 2:15 p.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...

6.8CVSS7.3AI score0.00312EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/22 1:14 p.m.•41 views

CVE-2023-27446 WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...

4.3CVSS9AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/22 1:14 p.m.•53 views

CVE-2023-27446

CVE-2023-27446 affects the WordPress DeepL Pro API translation plugin (versions

8.8CVSS6.5AI score0.00312EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•16 views

WordPress Plugin DeepL API translation plugin security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS8.1AI score0.00312EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•6 views

CVE-2023-27446: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.1.4 versions...

8.8CVSS7.9AI score0.00312EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/11/15 12:00 a.m.•24 views

Rockwell Automation Stratix Cisco IOS Software Network Address Translation Denial of Service (CVE-2014-3361)

A vulnerability in the Network Address Translation NAT feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper translation of IP version 4 IPv4 packets. This plugin only...

7.1CVSS7.3AI score0.02365EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/11/15 12:00 a.m.•29 views

Rockwell Automation Stratix 5900 Improper Input Validation (CVE-2014-2109)

A vulnerability in the TCP Input module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of the affected device which could lead to a denial of service DoS condition. The vulnerability is due to the way certain sequences of TCP packets are...

7.8CVSS7.2AI score0.0228EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2023/11/14 3:46 p.m.•21 views

kernel: drm/ttm: Don't leak a resource on swapout move error

A resource leak was found in the TTM Translation Table Manager memory management subsystem of the Linux kernel's DRM Direct Rendering Manager. When moving a buffer object to system memory for swapout fails, the allocated resource is not properly freed, leading to gradual memory exhaustion on...

7.8CVSS6.4AI score0.00194EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2023/11/13 1:15 a.m.•15 views

CVE-2023-46620

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.3.9.1 versions...

8.8CVSS7.3AI score0.00261EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/13 1:15 a.m.•32 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.3.9.1 versions...

6.8CVSS7.2AI score0.00261EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/13 12:38 a.m.•18 views

CVE-2023-46620 WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.3.9.1 versions...

4.3CVSS7.1AI score0.00261EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/13 12:38 a.m.•42 views

CVE-2023-46620 WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fluenx DeepL API translation plugin = 2.3.9.1 versions...

4.3CVSS9AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/13 12:38 a.m.•79 views

CVE-2023-46620

CVE-2023-46620 is a CSRF vulnerability in the WordPress DeepL API translation plugin (Fluenx DeepL API translation) affecting versions up to 2.4.1.1 (per Patchstack/NVD). The issue stems from missing CSRF protection, potentially allowing unauthenticated users to trigger actions. The vulnerability...

8.8CVSS6.4AI score0.00261EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/11/13 12:00 a.m.•18 views

WordPress Plugin DeepL API translation plugin security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS6.5AI score0.00261EPSS
SaveExploits0References2
Rows per page
Query Builder