Lucene search
+L

403 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:35 a.m.•22 views

CVE-2024-22854

DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 bundle version 61050 and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an...

6.1CVSS6.9AI score0.00396EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:12 a.m.•28 views

CVE-2023-23708

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.4 versions...

6.5CVSS5.6AI score0.00421EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:07 a.m.•21 views

CVE-2022-46848

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin = 3.9.1 versions...

6.5CVSS5.6AI score0.00508EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/11 11:10 p.m.•9 views

Malicious code in nodes-tree-visualizer-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2268ec6364a3c145eaefc143677f3caf0d603a4fb921c9d8ed782d3133687a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/03/04 12:00 a.m.•24 views

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, stems from an uncontrolled element in the search process. This allows attackers to exploit their privileges.

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

6.7CVSS5.5AI score0.00199EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/19 5:22 a.m.•10 views

CVE-2025-1065 Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/19 5:22 a.m.•93 views

CVE-2025-1065

The Red Hat and Wordfence data confirm CVE-2025-1065 is a Stored XSS vulnerability in Visualizer: Tables and Charts Manager for WordPress. Affected: Visualizer plugin for WordPress (Visualizer: Tables and Charts Manager for WordPress) up to version 3.11.8. Root cause: insufficient input sanitizat...

6.4CVSS5.7AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/19 12:00 a.m.•9 views

PT-2025-7489

Name of the Vulnerable Software and Affected Versions The Visualizer: Tables and Charts Manager for WordPress versions up to, and including, 3.11.8 Description The issue is related to Stored Cross-Site Scripting via the plugin's Import Data From File feature due to insufficient input sanitization...

6.4CVSS0.00271EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/02/19 12:00 a.m.•15 views

WordPress plugin Visualizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

6.4CVSS8.3AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/19 12:00 a.m.•7 views

CVE-2025-1065: Improper Neutralization of Input During Web Page Generation

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6AI score0.00271EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/02/18 10:41 p.m.•21 views

WordPress Visualizer plugin <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Import Data From File vulnerability discovered by Webbernaut in WordPress Plugin Visualizer versions = 3.11.8...

6.4CVSS5.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•13 views

Intel Thread Director Visualizer 代码问题漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A code issue vulnerability exists in Int...

6.7CVSS6.7AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•7 views

CVE-2024-36283: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•18 views

PT-2025-6649 · Intel · Intel Thread Director Visualizer

Name of the Vulnerable Software and Affected Versions: IntelR Thread Director Visualizer version 1.0.0 Description: The issue concerns an uncontrolled search path in the IntelR Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privileg...

6.7CVSS7.5AI score0.00199EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/05 9:53 p.m.•20 views

CVE-2022-24900

Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to a path traversal attack. The os.path.join call is unsafe for use with untrusted input. When the os.path.join call encounters an absolute...

9.9CVSS6.7AI score0.0841EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:16 a.m.•26 views

CVE-2024-3750

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on the getQueryData function in all versions up to, and including, 3.10.15. This makes it possible for authenticated...

8.8CVSS7.2AI score0.00614EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:56 a.m.•21 views

CVE-2024-27958

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affects Visualizer: from n/a through 3.10.5...

7.1CVSS8.6AI score0.00445EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:11 p.m.•32 views

CVE-2024-35736

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer.This issue affects Visualizer: from n/a through 3.11.1...

8.8CVSS7.6AI score0.00441EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/30 4:55 p.m.•12 views

Malicious code in gcp-scanner-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
OSV
OSV
•added 2025/01/30 4:55 p.m.•14 views

MAL-2025-663 Malicious code in gcp-scanner-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder