Lucene search
+L

1827 matches found

Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•3 views

PT-2022-33171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.325, upda...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•3 views

PT-2022-32800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.134,...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•4 views

PT-2022-32944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.208, upda...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32833

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.132,...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32394

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl tcp l3mdev accept in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32960

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.207, upda...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.56, upda...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•4 views

PT-2022-32596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue is related to a data-race around sysctl udp l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•1 views

PT-2022-32929

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue is related to a data-race around sysctl udp l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32616

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp l3mdev accept in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32440

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.13, upda...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•3 views

PT-2022-33116

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.290 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.290,...

5.7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/07/19 12:00 a.m.•65 views

WordPress plugin Accept Stripe Payments cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS4.8AI score0.00588EPSS
SaveExploits1References1
OSV
OSV
•added 2022/07/17 11:15 a.m.•18 views

CVE-2022-2194

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00588EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/17 11:15 a.m.•9 views

CVE-2022-2194

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.9AI score0.00588EPSS
SaveExploits1References2
Prion
Prion
•added 2022/07/17 11:15 a.m.•28 views

Cross site scripting

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

3.5CVSS4.8AI score0.00588EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/07/17 10:37 a.m.•88 views

CVE-2022-2194

The CVE-2022-2194 entry concerns the WordPress Accept Stripe Payments plugin, affected versions before 2.0.64. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient sanitization/escaping of certain plugin settings, enabling an admin (high privilege) to perform XSS even wh...

4.8CVSS4.8AI score0.00588EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/17 12:00 a.m.•6 views

CVE-2022-2194: Improper Neutralization of Input During Web Page Generation

The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00588EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/17 12:00 a.m.•2 views

PT-2022-15193

Name of the Vulnerable Software and Affected Versions Accept Stripe Payments WordPress plugin versions prior to 2.0.64 Description The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the plugin's failure to sanitize and escape some of its settings...

4.8CVSS0.00588EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/07/17 12:00 a.m.•21 views

WordPress plugin Accept Stripe Payments 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

4.8CVSS5.3AI score0.00588EPSS
SaveExploits1References2
Rows per page
Query Builder