Lucene search
+L

11983 matches found

Citrix
Citrix
added 2021/08/24 12:00 a.m.16 views

After command-line install of Workspace App 2107, there in no Add button to add additional Stores

When installing CWA via command line that includes a store, the Add button in Accounts may be missing...

7.2AI score
SaveExploits0
NVD
NVD
added 2021/08/23 8:15 p.m.26 views

CVE-2021-22449

There is a logic vulnerability in Elf-G10HN 1.0.0.608. An unauthenticated attacker could perform specific operations to exploit this vulnerability. Due to insufficient security design, successful exploit could allow an attacker to add users to be friends without prompting in the target device...

7.5CVSS0.00607EPSS
SaveExploits0References1
Huntr
Huntr
added 2021/08/23 8:28 a.m.15 views

Cross-Site Request Forgery (CSRF) in erikdubbelboer/phpredisadmin

✍️ Description The Add Key functionality in the Application is vulnerable to CSRF attack. 🕵️‍♂️ Proof of Concept history.pushState'', '', '/' 💥 Impact This vulnerability can let an attacker add data to the database without the knowledge/interaction of the user. 📍 Location index.phpL1 📝 References...

2.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/08/23 12:00 a.m.10 views

Wordpress Plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the Wordpress...

5.4CVSS5.4AI score0.00576EPSS
SaveExploits1References2
Prion
Prion
added 2021/08/20 8:15 p.m.18 views

Cross site request forgery (csrf)

A cross site request forgery CSRF vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials, and add or delete administrator accounts...

4.3CVSS8AI score0.00427EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/20 5:15 p.m.6 views

CVE-2021-34218

Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, and /mobile directories via GET Parameter...

5.3CVSS6.1AI score0.00815EPSS
SaveExploits1References2
OSV
OSV
added 2021/08/19 2:39 p.m.7 views

CVE-2021-27822

A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

4.8CVSS5.6AI score0.00611EPSS
SaveExploits1References1
NVD
NVD
added 2021/08/19 2:39 p.m.24 views

CVE-2021-27822

A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

4.8CVSS0.00611EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/08/19 2:39 p.m.5 views

CVE-2021-27822

A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References2
Prion
Prion
added 2021/08/19 2:39 p.m.23 views

Cross site scripting

A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

3.5CVSS5AI score0.00611EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/08/19 1:58 p.m.61 views

CVE-2021-27822

CVE-2021-27822 affects Vehicle Parking Management System 1.0, with a persistent XSS in the Add Categories module via the Category field. Root cause cited across connected sources as insufficient validation/escape of client-side data, enabling arbitrary script execution. Impact is described as rem...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/19 1:58 p.m.37 views

CVE-2021-27822

A persistent cross site scripting XSS vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

5.3AI score0.00611EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/08/19 12:00 a.m.8 views

PT-2021-17631 · Unknown · Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: Vehicle Parking Management System version 1.0 Description: A persistent cross site scripting XSS issue in the Add Categories module allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/08/19 12:00 a.m.16 views

PT-2022-3327 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4 through 10.7 Description: The issue is related to a buffer overflow in the prepare inplace add virtual function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality,...

10CVSS7.5AI score0.73188EPSS
SaveExploits120References765
OSV
OSV
added 2021/08/16 7:15 p.m.10 views

CVE-2021-34666

The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...

6.1CVSS5.8AI score0.00844EPSS
SaveExploits1References2
NVD
NVD
added 2021/08/16 7:15 p.m.26 views

CVE-2021-34666

The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...

6.1CVSS0.00844EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2021/08/16 6:22 p.m.9 views

CVE-2021-34666 Add Sidebar <= 2.0.0 Reflected Cross-Site Scripting

The Add Sidebar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the add parameter in the /wpsidebarMenu.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.0...

6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References2
CVE
CVE
added 2021/08/16 6:22 p.m.71 views

CVE-2021-34666

The CVE-2021-34666 entry concerns the WordPress Add Sidebar plugin, affected in versions up to and including 2.0.0. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw triggered via the add parameter in the ~/wp_sidebarMenu.php script, enabling an attacker to inject arbitrary scripts...

6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/08/16 12:00 a.m.11 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. WordPress Add Sidebar plugin has a security...

6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References3
Patchstack
Patchstack
added 2021/08/13 12:00 a.m.23 views

WordPress Add Sidebar plugin <= 2.0.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Add Sidebar plugin versions = 2.0.0. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.9AI score0.00844EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder