Lucene search
K

16 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/21 6:43 a.m.1 views

CVE-2026-6712

The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

4.4CVSS5.8AI score0.00031EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.0 views

PT-2026-33921

Name of the Vulnerable Software and Affected Versions LLMs.txt plugin for WordPress versions prior to 8.2.7 Description The plugin is subject to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in admin settings. Authenticated attackers with administrator-lev...

4.4CVSS5.4AI score0.00031EPSS
Exploits0References5
EUVD
EUVD
added 2026/03/19 9:30 a.m.0 views

EUVD-2026-13089

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Howard Website LLMs.Txt allows Reflected XSS.This issue affects Website LLMs.Txt: from n/a through 8.2.6...

7.1CVSS5.8AI score0.00045EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/19 8:0 a.m.5 views

WordPress Quick Contact Form plugin <= 8.2.6 - Unauthenticated Open Mail Relay vulnerability

Unauthenticated Open Mail Relay vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Quick Contact Form versions = 8.2.6...

5.8CVSS5.4AI score0.00221EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/17 2:22 a.m.2 views

CVE-2025-12718 Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay

The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcfvalidateform' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it possible for unauthenticated attackers t...

5.8CVSS5.7AI score0.00221EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:52 p.m.5 views

CVE-2020-8775

Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting XSS vulnerability in the comment tags...

8.9CVSS5.6AI score0.00535EPSS
Exploits0References1
SUSE Linux
SUSE Linux
added 2025/02/03 8:53 a.m.3 views

Security update for qemu

This update for qemu fixes the following issues: Fix bsc1221812: block: Reschedule query-block during qcow2 invalidation bsc1221812 Fix bsc1229007, CVE-2024-7409: nbd/server: CVE-2024-7409: Close stray clients at server-stop bsc1229007 nbd/server: CVE-2024-7409: Drop non-negotiating clients...

8.2CVSS7.1AI score0.01848EPSS
Exploits0References10
OSV
OSV
added 2025/02/03 8:53 a.m.0 views

SUSE-SU-2025:20036-1 Security update for qemu

This update for qemu fixes the following issues: - Fix bsc1221812: block: Reschedule query-block during qcow2 invalidation bsc1221812 - Fix bsc1229007, CVE-2024-7409: nbd/server: CVE-2024-7409: Close stray clients at server-stop bsc1229007 nbd/server: CVE-2024-7409: Drop non-negotiating clients...

7.8CVSS5.8AI score0.01848EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.20 views

SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2024:2983-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2983-1 advisory. - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command bsc1227322 -...

7.8CVSS7.6AI score0.01848EPSS
Exploits0References7
Patchstack
Patchstack
added 2022/11/01 12:0 a.m.16 views

WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dave Jong Patchstack in the WordPress Soledad premium theme versions = 8.2.5. Solution Update the WordPress soledad theme to the latest available version at least 8.2.6...

3.1AI score
Exploits0Affected Software1
Patchstack
Patchstack
added 2022/10/30 12:0 a.m.27 views

WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability

Auth. Cross-Site Scripting XSS vulnerability discovered by Dave Jong in WordPress Soledad premium theme versions = 8.2.5. Solution Update the WordPress soledad theme to the latest available version at least 8.2.6...

5.4CVSS2.1AI score0.00191EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2020/04/29 2:11 p.m.10 views

CVE-2020-8774

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function...

8.1AI score0.00528EPSS
Exploits0References1
OSV
OSV
added 2020/01/31 10:15 p.m.4 views

CVE-2014-8126

The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...

8.8CVSS8.7AI score
Exploits0References6
OSV
OSV
added 2020/01/31 10:15 p.m.1 views

UBUNTU-CVE-2014-8126

The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...

8.8CVSS7AI score0.01138EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2020/01/31 9:39 p.m.18 views

CVE-2014-8126

The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code...

8.8CVSS7.7AI score0.01138EPSS
Exploits0
Packet Storm
Packet Storm
added 2003/12/23 12:0 a.m.20 views

dcamwebcam.txt

Luigi Auriemma Application: DCAM WebCam server http://www.hyperionx.com http://sourceforge.net/projects/dcamserver/ Versions: = 8.2.5 Platforms: Windows Bug: Directory traversal bug Risk: high Exploitation: remote with browser Date: 22 Dec 2003 Author: Luigi Auriemma e-mail: [email protected]...

7.4AI score
Exploits0
Rows per page
Query Builder