Lucene search
+L

13222 matches found

Cvelist
Cvelist
•added 2024/04/01 12:00 a.m.•34 views

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

5.8AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/01 12:00 a.m.•19 views

PT-2024-20732 · Axigen · Axigen

Name of the Vulnerable Software and Affected Versions: Axigen versions 10.0 through 10.3.3.61 Description: The issue allows for cross-site scripting XSS via the image attachment viewer in WebMail. This could potentially affect a significant number of devices worldwide, although the exact number i...

4.7CVSS6.2AI score0.00344EPSS
SaveExploits0References5
CVE
CVE
•added 2024/04/01 12:00 a.m.•101 views

CVE-2024-25080

Axigen WebMail versions 10.0 through 10.3.3.61 are vulnerable to a cross-site scripting (XSS) flaw within the image attachment viewer . This vulnerability is caused by the improper neutralization of input during web page generation. Exploitation of this issue could allow an attacker to execute ma...

4.7CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/01 12:00 a.m.•10 views

CVE-2024-25080: Improper Neutralization of Input During Web Page Generation

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

4.7CVSS5.8AI score0.00344EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/31 8:15 p.m.•44 views

CVE-2024-30559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

6.5CVSS6.4AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/31 8:15 p.m.•33 views

CVE-2024-30524

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

6.5CVSS6.5AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/31 8:08 p.m.•17 views

CVE-2024-30524 WordPress PDF Viewer for Elementor plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

6.5CVSS6.8AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/31 8:08 p.m.•97 views

CVE-2024-30524

CVE-2024-30524 : Stored XSS in RedLettuce PDF Viewer for Elementor caused by improper input neutralization during web page generation. Affected: PDF Viewer for Elementor versions up to 2.9.3 (vendor listing notes “from n/a through 2.9.3”). CVSS v3.1 base score 5.4 (medium); impact limited to conf...

6.5CVSS8.6AI score0.00337EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/03/31 7:39 p.m.•98 views

CVE-2024-30559

CVE-2024-30559 is a cross-site scripting (Stored XSS) vulnerability reported in the Spin 360 deg and 3D Model Viewer WordPress plugin. The CVE entry notes the flaw affects Spin 360 deg and 3D Model Viewer versions from an unspecified baseline up to 1.2.7. The linked Red Hat entry reiterates the i...

6.5CVSS8.6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/31 7:39 p.m.•57 views

CVE-2024-30559 WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

6.5CVSS6.6AI score0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/31 7:39 p.m.•16 views

CVE-2024-30559 WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

6.5CVSS6.8AI score0.0034EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/03/31 12:55 a.m.•10 views

Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

7.1AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/03/31 12:55 a.m.•22 views

MAL-2024-1171 Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

7.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•6 views

CVE-2024-30559: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/31 12:00 a.m.•22 views

PT-2024-23452 · Unknown · Redlettuce Plugins Pdf Viewer For Elementor

Name of the Vulnerable Software and Affected Versions: RedLettuce Plugins PDF Viewer for Elementor versions through 2.9.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potenti...

6.5CVSS9.2AI score0.00337EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/31 12:00 a.m.•9 views

CVE-2024-30524: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

6.5CVSS5.8AI score0.00337EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/31 12:00 a.m.•22 views

WordPress Plugin PDF Viewer for Elementor: Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plugin. WordPress Plugin PDF Viewer for...

6.5CVSS7.5AI score0.00337EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/03/29 11:02 a.m.•15 views

WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Spin 360 deg and 3D Model Viewer versions = 1.2.7...

6.5CVSS7.1AI score0.0034EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•21 views

Keyence KV STUDIO and Keyence KV REPLAY VIEWER have security vulnerabilities

Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...

7.8CVSS7.5AI score0.00297EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/03/29 12:00 a.m.•22 views

Keyence KV STUDIO and Keyence KV REPLAY VIEWER have security vulnerabilities

Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...

8.8CVSS7.6AI score0.00848EPSS
SaveExploits0References5
Rows per page
Query Builder