Lucene search
+L

696 matches found

Cvelist
Cvelist
•added 2023/07/10 12:00 p.m.•29 views

CVE-2015-10120 WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting

A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function updateoptions of the file includes/WDSMultisiteAggregateOptions.php. The manipulation leads to cross site scripting. It is possible to launch the...

4CVSS6.1AI score0.00546EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/10 12:00 a.m.•1 views

CVE-2015-10120: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function updateoptions of the file includes/WDSMultisiteAggregateOptions.php. The manipulation leads to cross site scripting. It is possible to launch the...

6.1CVSS3.7AI score0.00546EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/10 12:00 a.m.•12 views

PT-2023-10298 · WordPress · Wds Multisite Aggregate Plugin

Name of the Vulnerable Software and Affected Versions: WDS Multisite Aggregate Plugin versions up to 1.0.0 Description: A problematic issue was found in the WDS Multisite Aggregate Plugin, affecting the update options function of the file includes/WDS Multisite Aggregate Options.php. This issue...

6.1CVSS4.2AI score0.00546EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/10 12:00 a.m.•11 views

WordPress plugin WDS Multisite Aggregate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS4.8AI score0.00546EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2023/05/26 8:40 p.m.•33 views

CVE-2023-0950

A vulnerability was found in LibreOffice. Improper validation of the array index in the spreadsheet component of The Document Foundation in LibreOffice allows an attacker to craft a spreadsheet document that causes an array index underflow when loaded. In affected versions of LibreOffice, certain...

7.3CVSS7.2AI score0.003EPSS
SaveExploits0References4
OSV
OSV
•added 2023/05/25 8:15 p.m.•8 views

DEBIAN-CVE-2023-0950

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...

7.8CVSS7.8AI score0.003EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/05/25 8:15 p.m.•80 views

CVE-2023-0950

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...

7.8CVSS7.1AI score0.003EPSS
SaveExploits0References3
OSV
OSV
•added 2023/05/25 8:15 p.m.•14 views

UBUNTU-CVE-2023-0950

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...

7.8CVSS6AI score0.003EPSS
SaveExploits0References4
Prion
Prion
•added 2023/05/25 8:15 p.m.•71 views

Input validation

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...

4.4CVSS7.5AI score0.003EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/25 12:00 a.m.•1 views

CVE-2023-0950: Improper Validation of Array Index

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet...

7.8CVSS7.8AI score0.003EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/24 12:00 a.m.•9 views

PT-2023-2958 · Document Foundation +9 · Libreoffice +9

Name of the Vulnerable Software and Affected Versions: LibreOffice versions 7.4.0 through 7.4.5 LibreOffice versions 7.5.0 through 7.5.0 Description: The issue is related to an improper validation of array index in the spreadsheet component, allowing an attacker to craft a malicious spreadsheet...

9.1CVSS7AI score0.64635EPSS
SaveExploits2References92
SUSE CVE
SUSE CVE
•added 2023/02/15 6:19 a.m.•10 views

SUSE CVE-2005-0244

PostgreSQL 8.0.0 and earlier allows local users to bypass the EXECUTE permission check for functions by using the CREATE AGGREGATE command...

6.5CVSS6.6AI score0.01968EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2023/02/15 4:41 a.m.•8 views

SUSE CVE-2017-12678

In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted audio file...

8.8CVSS7.4AI score0.02207EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:26 a.m.•18 views

SUSE CVE-2022-28346

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate, aggregate, and extra methods are subject to SQL injection in column aliases via a crafted dictionary with dictionary expansion as the passed kwargs...

7.3CVSS6.7AI score0.18661EPSS
SaveExploits3References7
RedHat Linux
RedHat Linux
•added 2022/12/07 8:29 p.m.•15 views

Django: SQL injection in QuerySet.annotate(),aggregate() and extra()

A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely...

9.8CVSS7.1AI score0.18661EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•9 views

PT-2022-35485 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the drm/meson driver in the Linux Kernel. It involves explicitly removing the aggregate driver at module unload time. The actual impact and attack plausibility have...

7.2AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/09/13 9:57 a.m.•12 views

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

5.5CVSS7.3AI score0.00551EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/09/01 2:21 p.m.•11 views

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

5.5CVSS7.3AI score0.00551EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•10 views

Ubuntu: Security Advisory (USN-369-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
Snyk
Snyk
•added 2022/08/19 8:11 a.m.•5 views

Malicious Package

Overview usaa-template-mocks-aggregate is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Rows per page
Query Builder