Lucene search
+L

10746 matches found

Patchstack
Patchstack
added 2024/06/27 1:30 p.m.6 views

WordPress PDF.js Viewer plugin <= 2.1.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin PDF.js Viewer versions = 2.1.8.1...

8.8CVSS8AI score0.72648EPSS
SaveExploits16Affected Software1
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.20 views

WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 4 Developer Claim ownership PSID 769c101f6b45 Credits Yudistira...

6.6AI score0.72648EPSS
SaveExploits16References1Affected Software1
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.17 views

WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.15.5 is vulnerable to Cross Site Scripting (XSS)

Software 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Type Plugin Vulnerable versions = 1.15.5 Fixed in 1.15.6 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim...

6.6AI score0.72648EPSS
SaveExploits16References2Affected Software1
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.28 views

WordPress PDF.js Viewer Plugin <= 2.1.8.1 is vulnerable to Cross Site Scripting (XSS)

Software PDF.js Viewer Type Plugin Vulnerable versions = 2.1.8.1 Fixed in 2.2 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b8e9d442ad86 Credits Yudistira Arya...

6.6AI score0.72648EPSS
SaveExploits16References2Affected Software1
Patchstack
Patchstack
added 2024/06/27 12:0 a.m.14 views

WordPress PDF Viewer Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 4 Developer Claim ownership PSID d7d95e288520 Credits Yudistira Arya Required privilege Author Publish...

6.9AI score0.72648EPSS
SaveExploits16References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/06/26 12:0 a.m.17 views

Hanwha Vision Web Viewer Cross-site Scripting (CVE-2018-11689)

Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi- bin/webviewerloginpage data3 parameter. The same Web Viewer codebase was transitioned from Samsung to Hanwha. This plugin only works with Tenable.ot. Please visit...

6.1CVSS6.1AI score0.01574EPSS
SaveExploits2References6
Redos
Redos
added 2024/06/26 12:0 a.m.24 views

ROS-20240625-03

A vulnerability in the GlutAddSubMenu function of the MuPDF PDF viewer is related to a memory leak via the MenuEntry variable. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the GlutAddMenuEntry function of the MuPDF PDF...

7.5CVSS6.6AI score0.01147EPSS
SaveExploits2
OSV
OSV
added 2024/06/25 1:51 p.m.9 views

MAL-2024-6978 Malicious code in logs-viewer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:51 p.m.10 views

Malicious code in logs-viewer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:4 p.m.7 views

MAL-2024-3146 Malicious code in topic-viewer (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:4 p.m.4 views

Malicious code in topic-viewer (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/18 3:15 a.m.8 views

CVE-2024-0845

The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

5.4CVSS5.9AI score0.00329EPSS
SaveExploits0References5
NVD
NVD
added 2024/06/18 3:15 a.m.37 views

CVE-2024-0845

The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

6.4CVSS0.00329EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/06/18 2:37 a.m.16 views

CVE-2024-0845 PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render

The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

6.4CVSS6AI score0.00329EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.9 views

WordPress plugin PDF Viewer for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin PDF Viewe...

6.4CVSS6AI score0.00329EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/06/18 12:0 a.m.10 views

PT-2024-15862 · WordPress · Pdf Viewer For Elementor

Name of the Vulnerable Software and Affected Versions: PDF Viewer for Elementor plugin for WordPress versions up to, and including, 2.9.3 Description: The issue is related to Stored Cross-Site Scripting via the render function due to insufficient input sanitization and output escaping. This allow...

6.4CVSS6.2AI score0.00329EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/06/17 2:35 p.m.8 views

WordPress PDF Viewer for Elementor plugin <= 2.9.3 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin PDF Viewer for Elementor versions = 2.9.3...

6.4CVSS5.7AI score0.00329EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/06/17 12:0 a.m.15 views

WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0845 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6b4d52880461 Credits WordFence Require...

6.4CVSS5.8AI score0.00329EPSS
SaveExploits0References2Affected Software1
Mageia
Mageia
added 2024/06/15 11:7 p.m.51 views

Updated atril packages fix security vulnerability

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS7.5AI score0.01016EPSS
SaveExploits3References2
OSV
OSV
added 2024/06/15 11:7 p.m.12 views

MGASA-2024-0224 Updated atril packages fix security vulnerability

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS8.5AI score0.01016EPSS
SaveExploits3References3
Rows per page
Query Builder