Lucene search
K

14 matches found

EUVD
EUVD
added 2025/12/17 6:31 p.m.1 views

EUVD-2025-203899

There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows malicious users to enumerate users by entering an OTP code and new password then reviewing application responses...

2.8CVSS6.4AI score0.00012EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.1 views

Entrinsik Informer 安全漏洞

Entrinsik Informer is a business intelligence and data analytics platform from US-based Entrinsik. A security vulnerability exists in Entrinsik Informer version 5.10.1, which stems from the presence of username enumeration at local user login, which could lead to a malicious user enumerating user...

2.8CVSS6.4AI score0.00012EPSS
Exploits1References4
CVE
CVE
added 2025/12/17 12:0 a.m.3 views

CVE-2025-65185

Summary: CVE-2025-65185 affects Entrinsik Informer v5.10.1, enabling username enumeration during local login by supplying an OTP code and a new password and observing application responses. The vulnerability's impact is described as low (CVSS v3.1: 2.8, LOCAL access, user interaction required). O...

2.8CVSS6.5AI score0.00012EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/06/06 12:53 p.m.13 views

CVE-2025-49298 WordPress Event post plugin <= 5.10.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows Stored XSS.This issue affects Event post: from n/a through = 5.10.1...

6.5CVSS0.00143EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/27 12:42 p.m.2 views

WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WPJobBoard versions = 5.10.1...

7.1CVSS6.1AI score0.0005EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/01 9:28 p.m.2 views

WordPress Element Pack Elementor Addons plugin <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.1...

5.4CVSS5.8AI score0.00337EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.2 views

PT-2024-39900 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.10.1 Description: The issue is related to Stored Cross-Site Scripting via the url parameter in the Age Gate Widget, caused by insufficient input...

5.4CVSS6.2AI score0.00337EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.2 views

PT-2024-16177 · Elementor · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: Element Pack Elementor Addons versions up to, and including, 5.10.1 Description: The vulnerability is a Stored Cross-Site Scripting issue due to insufficient input sanitization and output escaping in the Custom Gallery Widget image title...

6.4CVSS6.2AI score0.00337EPSS
Exploits0References12
NVD
NVD
added 2023/08/29 5:15 p.m.20 views

CVE-2023-41037

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: ..." header declaring the hash algorit...

4.3CVSS4.4AI score0.00095EPSS
Exploits1References2
OSV
OSV
added 2021/10/22 5:15 p.m.2 views

CLSA-2021-1634922942 Fixed CVE-2020-10543 in perl-5.10.1

CVE-2020-10543: fix signed integer overflow leading to heap buffer overrun...

8.2CVSS7AI score0.04289EPSS
Exploits0References1
Tibco
Tibco
added 2018/06/06 10:0 p.m.16 views

TIBCO Security Advisory: June 12, 2018 - TIBCO Administrator - Enterprise Edition -2018-5433

XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator Original release date: June 12, 2018 Last revised: -- CVE-2018-5433 Source: TIBCOSoftware Inc. XML eXternal Entity Expansion Vulnerabilities with TIBCO Administrator Original release date: June 12, 2018 Last revised: -- Source...

6.8CVSS6.9AI score0.0022EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2015/02/12 12:0 a.m.3 views

PT-2015-4003 · Apache · Apache Activemq

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.10.1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the web-based administration console. These vulnerabilities allow remote attackers to inject arbitrary web script or...

4.3CVSS8.2AI score0.03908EPSS
Exploits0References15
OpenVAS
OpenVAS
added 2009/11/05 12:0 a.m.15 views

Perl UTF-8 Regular Expression Processing DoS Vulnerability - Windows

Perl is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.4AI score0.01296EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2009/11/05 12:0 a.m.21 views

Perl UTF-8 Regular Expression Processing DoS Vulnerability (Windows)

The host is installed with Perl and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbperlutf8regexdosvulnwin.nasl 6483 2017-06-29 08:51:15Z cfischer $ Perl UTF-8 Regular Expression Processing DoS Vulnerability Windows Authors: Nikita MR Copyright: Copyright c 2009...

5CVSS6.5AI score0.01296EPSS
Exploits1References3
Rows per page
Query Builder