Lucene search
+L

13083 matches found

CNNVD
CNNVD
•added 2023/04/06 12:00 a.m.•14 views

WordPress plugin Maps Widget for Google Maps 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

4.8CVSS6.6AI score0.00377EPSS
SaveExploits0References3
Circl
Circl
•added 2023/04/05 12:00 a.m.•28 views

CVE-2023-0493

creationtimestamp| type| source ---|---|--- 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51254 2023-12-11 00:57:29+00:00| seen| https://t.me/arpsyndicate/1683 2025-03-31 17:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9712...

8.8CVSS8.1AI score0.07896EPSS
SaveExploits4References3
Circl
Circl
•added 2023/04/04 4:30 p.m.•16 views

CVE-2023-28998

creationtimestamp| type| source ---|---|--- 2023-04-04 16:30:51+00:00| seen| https://t.me/cibsecurity/61394...

6.7CVSS6.2AI score0.00679EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/04/04 12:00 a.m.•17 views

PT-2023-8807

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21 Description: The issue is related to the improper handling of backticks as Javascript string delimiters in templates, which can lead to the injection of arbitrary Javascript code into the Go template. This occurs whe...

10CVSS9.7AI score0.99999EPSS
SaveExploits37References358
Circl
Circl
•added 2023/04/03 10:25 p.m.•14 views

CVE-2022-43773

creationtimestamp| type| source ---|---|--- 2023-04-03 22:25:00+00:00| seen| https://t.me/cibsecurity/61352 2023-04-08 20:04:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8078...

8.8CVSS7.3AI score0.22179EPSS
SaveExploits0References2
Circl
Circl
•added 2023/04/03 10:24 p.m.•18 views

CVE-2022-4771

creationtimestamp| type| source ---|---|--- 2023-04-03 22:24:51+00:00| seen| https://t.me/cibsecurity/61344...

6.1CVSS6.3AI score0.00353EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/03/31 1:57 a.m.•7 views

SUSE CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS9AI score0.01185EPSS
SaveExploits0References4
Citrix
Citrix
•added 2023/03/31 12:00 a.m.•15 views

Changes to Citrix Workspace Standard and ShareFile Content Collaboration in Citrix Workspace Bundles

Effective April 17, 2023, Cloud Software Group has made the decision to end of renewal EoR Citrix Workspace Standard and remove ShareFile Content Collaboration from the Citrix Workspace cloud and on-prem subscriptions. This change is part of our ongoing efforts to enhance our product offerings an...

7AI score
SaveExploits0
Circl
Circl
•added 2023/03/30 1:32 p.m.•12 views

CVE-2022-23522

creationtimestamp| type| source ---|---|--- 2023-03-30 13:32:54+00:00| published-proof-of-concept| https://github.com/mindsdb/minds-platform/security/advisories/GHSA-7x45-phmr-9wqp 2023-03-30 22:35:30+00:00| seen| https://t.me/cibsecurity/61194 2026-03-21 07:30:05+00:00| seen|...

8.8CVSS7AI score0.00883EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/03/30 12:00 a.m.•15 views

Nextcloud 代码问题漏洞

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, a German company. A code issue vulnerability exists in Nextcloud server that stems from the ability to control file names when uploading a website icon as an administrator ...

8.8CVSS7.9AI score0.00762EPSS
SaveExploits0References3
Circl
Circl
•added 2023/03/29 10:28 p.m.•12 views

CVE-2022-37381

creationtimestamp| type| source ---|---|--- 2023-03-29 22:28:52+00:00| seen| https://t.me/cibsecurity/61105...

7.8CVSS7.4AI score0.01025EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/29 12:00 a.m.•14 views

PT-2023-17182 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.20 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository pimcore/pimcore. This vulnerability has the potential to steal a user's cookie and gain unauthorized...

5.4CVSS4.1AI score0.00439EPSS
SaveExploits1References11
Circl
Circl
•added 2023/03/28 10:40 p.m.•15 views

CVE-2022-0650

creationtimestamp| type| source ---|---|--- 2023-03-28 22:40:05+00:00| seen| https://t.me/cibsecurity/60925...

8CVSS6.9AI score0.00718EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/28 9:15 p.m.•10 views

UBUNTU-CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

8.2CVSS5.7AI score0.01185EPSS
SaveExploits0References5
Circl
Circl
•added 2023/03/28 2:32 a.m.•14 views

CVE-2022-48357

creationtimestamp| type| source ---|---|--- 2023-03-28 02:32:13+00:00| seen| https://t.me/cibsecurity/60861...

7.5CVSS7.3AI score0.00474EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/03/28 12:00 a.m.•14 views

Jenkins Plugin Veracode Scan 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

5.5CVSS5.8AI score0.00206EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/03/28 12:00 a.m.•13 views

The vulnerability of the crypt_64bit_up/down() function in the Telnet service of Netgear’s microprogrammed router Orbi RBR750 allows a hacker to execute arbitrary commands.

The vulnerability of the crypt64bitup/down function in the Telnet service of Netgear Orbi RBR750 microprogramming routers is related to the presence of hidden functionality when using the Blowfish cryptographic algorithm. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

9CVSS8AI score0.02107EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2023/03/27 10:15 p.m.•10 views

CVE-2022-40571

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2023/03/27 10:15 p.m.•6 views

CVE-2022-40566

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2023/03/27 10:15 p.m.•8 views

CVE-2022-40562

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder