Lucene search
+L

3697 matches found

OSV
OSV
added 2023/04/27 12:0 a.m.22 views

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

5.4CVSS5.9AI score0.00419EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/20 8:15 p.m.6 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.4CVSS6AI score0.00427EPSS
SaveExploits1References2
NVD
NVD
added 2023/04/20 8:15 p.m.27 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.4CVSS5.2AI score0.00427EPSS
SaveExploits1References2
Prion
Prion
added 2023/04/20 8:15 p.m.18 views

Cross site scripting

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

4.9CVSS5.3AI score0.00427EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/20 12:0 a.m.3 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.3AI score0.00427EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2023/04/14 12:0 a.m.42 views

WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Article Directory Redux Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30751 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1d10759d477b Credits Pavitra Tiwari...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References1Affected Software1
Microsoft Security Update
Microsoft Security Update
added 2023/04/11 5:0 p.m.22 views

2023-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5025221)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.4AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2023/04/11 5:0 p.m.23 views

2023-04 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5025221)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.4AI score
SaveExploits0
Patchstack
Patchstack
added 2023/04/11 12:0 a.m.10 views

WordPress Article Directory Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Article Directory Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0422 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f6d5f6847d44 Credits Shreya Pohekar Required...

4.8CVSS6AI score0.0047EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2023/04/10 2:15 p.m.6 views

CVE-2023-0422

The Article Directory WordPress plugin through 1.3 does not properly sanitize the publishtermstext setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts...

4.8CVSS5.8AI score0.0047EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/04/10 1:18 p.m.6 views

CVE-2023-0422 Article Directory <= 1.3 - Admin+ Stored XSS

The Article Directory WordPress plugin through 1.3 does not properly sanitize the publishtermstext setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts...

4.8AI score0.0047EPSS
SaveExploits2References1
CVE
CVE
added 2023/04/10 1:18 p.m.60 views

CVE-2023-0422

CVE-2023-0422 affects the Article Directory WordPress plugin

4.8CVSS4.8AI score0.0047EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.5 views

WordPress plugin Article Directory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS5AI score0.0047EPSS
SaveExploits2References2
Microsoft Security Update
Microsoft Security Update
added 2023/04/03 7:0 p.m.15 views

Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)

Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.7AI score
SaveExploits0
Cvelist
Cvelist
added 2023/03/31 12:0 a.m.36 views

CVE-2023-27160

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery SSRF via the component /articles/id. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...

7AI score0.01157EPSS
SaveExploits1References3
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.12 views

2023-02 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 for x64 (KB5022728)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/03/27 12:0 a.m.207 views

Raspberry Pi Camera Server 1.0 Authentication Bypass

Exploit Title: "camp" Raspberry Pi camera server 1.0 - Authentication Bypass Date: 2022-07-25 Exploit Author: Elias Hohl Vendor Homepage: https://github.com/patrickfuller Software Link: https://github.com/patrickfuller/camp Version: bf6af5c2e5cf713e4050c11c52dd4c55e89880b1 Tested on: Ubuntu 20.04...

9.8CVSS9.4AI score0.49201EPSS
SaveExploits3
OSV
OSV
added 2023/03/24 8:15 a.m.7 views

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.7AI score0.00475EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/24 8:15 a.m.25 views

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

5.4CVSS4.3AI score0.00475EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/24 8:15 a.m.20 views

Cross site scripting

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

4CVSS5.3AI score0.00475EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder