Lucene search
+L

5080 matches found

NVD
NVD
•added 2025/01/22 3:15 p.m.•15 views

CVE-2025-23625

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode Unique UX unique-ux allows Reflected XSS.This issue affects Unique UX: from n/a through = 0.9.2...

7.1CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/22 2:29 p.m.•7 views

CVE-2025-23625 WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AWcode, PDSonline Unique UX allows Reflected XSS. This issue affects Unique UX: from n/a through 0.9.2...

7.1CVSS7.2AI score0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/22 2:29 p.m.•27 views

CVE-2025-23625 WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode Unique UX unique-ux allows Reflected XSS.This issue affects Unique UX: from n/a through = 0.9.2...

7.1CVSS0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•9 views

PT-2025-4983 · Unique Ux · Unique Ux

Name of the Vulnerable Software and Affected Versions: Unique UX versions 0.9.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

7.1CVSS8.8AI score0.00393EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/22 12:00 a.m.•2 views

CVE-2025-23625: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awcode Unique UX unique-ux allows Reflected XSS.This issue affects Unique UX: from n/a through = 0.9.2...

7.1CVSS5.8AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•13 views

WordPress plugin Unique UX 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS7.7AI score0.00393EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•11 views

WordPress Unique UX plugin <= 0.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Unique UX versions = 0.9.2...

7.1CVSS6.1AI score0.00393EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/09 4:51 a.m.•11 views

Malicious code in semi-ux (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/12/09 4:51 a.m.•9 views

MAL-2024-11450 Malicious code in semi-ux (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/11/25 3:37 p.m.•21 views

SUSE-SU-2024:4050-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 128.4.3 fixed: Folder corruption could cause Thunderbird to freeze and become unusable fixed: Message corruption could be propagated when reading mbox fixed: Folder compaction was not abandoned on shutdown fixed:...

9.8CVSS8.6AI score0.0081EPSS
SaveExploits0References14
NVD
NVD
•added 2024/11/16 10:15 p.m.•27 views

CVE-2024-52411

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

9.8CVSS0.00524EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/16 9:39 p.m.•39 views

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allows Object Injection.This issue affects Advanced Personalization: from n/a through = 1.1.2...

9.8CVSS0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/16 9:39 p.m.•28 views

CVE-2024-52411 WordPress Advanced Personalization plugin <= 1.1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Flowcraft UX Design Studio Advanced Personalization allows Object Injection.This issue affects Advanced Personalization: from n/a through 1.1.2...

9.8CVSS6.9AI score0.00524EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/16 9:39 p.m.•64 views

CVE-2024-52411

CVE-2024-52411 describes a deserialization of untrusted data vulnerability in Flowcraft UX Design Studio Advanced Personalization, enabling PHP object injection. Affected: Flowcraft Advanced Personalization component, versions up to 1.1.2 (n/a through 1.1.2). CVSS 3.1 base 9.8 (Network attack vec...

9.8CVSS7.2AI score0.00524EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2024/11/12 12:00 a.m.•21 views

HPESBUX04729 rev.1 - HP-UX NTP Software, Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Write Access to the File System, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software - Prior to C.4.2.8.7.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

6.4CVSS6.1AI score0.00697EPSS
SaveExploits0
CVE
CVE
•added 2024/10/22 12:00 a.m.•62 views

CVE-2024-49211

CVE-2024-49211 describes a Reflected XSS in the Dashboard Listing Archer Platform UX page for Archer Platform 6.x before 2024.08 . The vulnerability allows a remote, unauthenticated attacker to lure a victim user into submitting malicious HTML/JavaScript, which is then reflected and executed in t...

6.1CVSS6.3AI score0.00343EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/22 12:00 a.m.•4 views

CVE-2024-49211: Improper Neutralization of Input During Web Page Generation

Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.08. A remote unauthenticated attacker could potentially exploit this by tricking a victim application user into supplying malicious HTML or JavaScript code to the vulnerable web...

6.1CVSS5.9AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/09 8:15 p.m.•24 views

CVE-2024-42500

HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...

9.3CVSS0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/09 7:22 p.m.•14 views

CVE-2024-42500

HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...

6.9AI score0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/09 7:22 p.m.•30 views

CVE-2024-42500

HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...

0.00415EPSS
SaveExploits0References1
Rows per page
Query Builder