Lucene search
K

262 matches found

OSV
OSV
added 2024/02/16 9:15 a.m.0 views

CVE-2024-22854

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 bundle version 61050 and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an...

6.1CVSS5.8AI score0.00089EPSS
Exploits1References1
Prion
Prion
added 2024/02/16 9:15 a.m.9 views

Design/Logic Flaw

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 bundle version 61050 and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an...

7.4AI score0.00089EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/02/16 12:0 a.m.12 views

CVE-2024-22854

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 bundle version 61050 and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an...

6.8AI score0.00089EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/02/16 12:0 a.m.10 views

CVE-2024-22854

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 bundle version 61050 and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an...

6.9AI score0.00089EPSS
Exploits1References1
CVE
CVE
added 2024/02/16 12:0 a.m.71 views

CVE-2024-22854

Darktrace Threat Visualizer contains a DOM-based HTML injection in the main page for versions 6.1.27 and earlier. A crafted URL visited by an authenticated user can trigger an open redirect and potential credential theft via an injected HTML form. Affected component: Darktrace Threat Visualizer m...

6.1CVSS6.8AI score0.00089EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/16 12:0 a.m.2 views

PT-2024-19586 · Darktrace · Darktrace Threat Visualizer

Name of the Vulnerable Software and Affected Versions: Darktrace Threat Visualizer versions 6.1.27 and before Description: A DOM-based HTML injection vulnerability has been identified in the main page of Darktrace Threat Visualizer. This issue allows a remote attacker to craft a URL that, when...

6.1CVSS6.9AI score0.00089EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/02/16 12:0 a.m.1 views

Darktrace Threat Visualizer Security Vulnerability

Darktrace Threat Visualizer is a component of one of Darktrace's security solutions for visualizing network threats and anomalous behavior. A security vulnerability exists in Darktrace Threat Visualizer version 6.1.27 and earlier. An attacker exploited the vulnerability to conduct open redirects...

6.1CVSS6.7AI score0.00089EPSS
Exploits1References2
VulnCheck KEV
VulnCheck KEV
added 2023/12/11 12:0 a.m.0 views

VulnCheck KEV: CVE-2019-16932

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data...

10CVSS7.3AI score0.80844EPSS
Exploits2References1
OSV
OSV
added 2023/08/02 7:9 p.m.10 views

MAL-2023-1325 Malicious code in twodc-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8320b928ec8230835a771ef3d18a7751bbf07d1ea39585419f48e7d5c41a9cd The OpenSSF Package Analysis project identified 'twodc-visualizer' @ 1.6.3 npm as malicious. It is considered malicious because: - The package...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/08/02 7:9 p.m.2 views

Malicious code in twodc-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8320b928ec8230835a771ef3d18a7751bbf07d1ea39585419f48e7d5c41a9cd The OpenSSF Package Analysis project identified 'twodc-visualizer' @ 1.6.3 npm as malicious. It is considered malicious because: - The package...

6.9AI score
Exploits0
NVD
NVD
added 2023/05/03 1:15 p.m.11 views

CVE-2023-23708

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

6.5CVSS5.9AI score0.00181EPSS
Exploits0References1
OSV
OSV
added 2023/05/03 1:15 p.m.2 views

CVE-2023-23708

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

5.4CVSS6.1AI score0.00181EPSS
Exploits0References1
Prion
Prion
added 2023/05/03 1:15 p.m.7 views

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

4.9CVSS5.3AI score0.00181EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/03 12:27 p.m.14 views

CVE-2023-23708 WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

6.5CVSS6AI score0.00181EPSS
Exploits0References1
CVE
CVE
added 2023/05/03 12:27 p.m.39 views

CVE-2023-23708

The CVE-2023-23708 entry concerns the WordPress plugin Themeisle Visualizer: Tables and Charts Manager for WordPress (WordPress Visualizer) and its affected versions 3.9.4 (fix available in 3.9.5 according to Patchstack). There is no explicit information about in-the-wild exploitation in the prov...

6.5CVSS5.4AI score0.00181EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/03 12:27 p.m.9 views

CVE-2023-23708 WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

6.5CVSS5.9AI score0.00181EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.3 views

PT-2023-19147 · Themeisle · Themeisle Visualizer

Name of the Vulnerable Software and Affected Versions: Themeisle Visualizer: Tables and Charts Manager for WordPress plugin versions = 3.9.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with...

6.5CVSS5.3AI score0.00181EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/03 12:0 a.m.3 views

WordPress plugin Visualizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.5AI score0.00181EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/04/05 3:30 a.m.2 views

bashbuddy (>=0.2.0 <=0.2.1), boilerplate-x (>=0.1.1 <=0.2.8) +23 more potentially affected by CVE-2023-29374 via langchain (>=0.0.100 <=0.0.131)

langchain PYPI version =0.0.100, =0.2.0, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =0.0.4, =10.9.15, =0.1.3, =0.3.0, =0.0.1, =0.0.13, =0.0.1, =0.0.40, =0.1.1, =0.0.1, =0.0.7 and more Source cves: CVE-2023-29374 Source advisory: OSV:GHSA-FPRP-P869-W6Q2...

9.8CVSS7.2AI score0.03769EPSS
Exploits1
NVD
NVD
added 2023/03/28 8:15 a.m.19 views

CVE-2022-46848

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.1 versions...

6.5CVSS5.9AI score0.00198EPSS
Exploits0References1
Rows per page
Query Builder