Lucene search
+L

3697 matches found

Cvelist
Cvelist
added 2024/10/29 12:31 a.m.22 views

CVE-2024-10478 LinZhaoguan pb-cms Edit Article edit cross site scripting

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /adminarticle/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated...

5.1CVSS0.0028EPSS
SaveExploits1References3
CVE
CVE
added 2024/10/29 12:31 a.m.52 views

CVE-2024-10478

CVE-2024-10478 affects LinZhaoguan pb-cms up to version 2.0.1. The issue resides in the Edit Article Handler, specifically in processing the file path /admin#article/edit?id=2, enabling cross-site scripting. Exploitation is possible remotely and has been publicly disclosed. Connected sources prov...

5.4CVSS3.4AI score0.0028EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/29 12:31 a.m.11 views

CVE-2024-10478 LinZhaoguan pb-cms Edit Article edit cross site scripting

A vulnerability, which was classified as problematic, has been found in LinZhaoguan pb-cms up to 2.0.1. This issue affects some unknown processing of the file /adminarticle/edit?id=2 of the component Edit Article Handler. The manipulation leads to cross site scripting. The attack may be initiated...

5.1CVSS6.2AI score0.0028EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.7 views

pb-cms 跨站脚本漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan personal developer. A cross-site scripting vulnerability exists in versions prior to pb-cms 2.0.1, which originates from the file /adminarticle/edit?id=2 of the component Edit Article Handler that can lead to...

5.4CVSS3.8AI score0.0028EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/10/28 12:0 a.m.18 views

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

0.00416EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.5 views

MRCMS 安全漏洞

MRCMS is a content management system by the individual developer of marker. A security vulnerability exists in MRCMS version 3.1.2, which originates from the RID parameter in /admin/article/delete.do contains a SQL injection vulnerability...

8.8CVSS7.8AI score0.00416EPSS
SaveExploits1References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/10/25 6:7 a.m.78 views

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability due to inappropriate Slug handling on Article Edit CWE-79 - CVE-2024-46996 Stored cross-site scripting vulnerability on Edit Email Form Settings CWE-79 ...

7.1CVSS5.9AI score0.00337EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/10/25 12:0 a.m.43 views

JVN#00876083: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability due to inappropriate Slug handling on Article Edit CWE-79 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Base Score 5.4 CVE-2024-46996 Stored cross-site scripting...

7.1CVSS6.3AI score0.00337EPSS
SaveExploits0
Snyk
Snyk
added 2024/10/24 7:40 p.m.3 views

Cross-site Scripting (XSS)

Overview baserproject/basercms is a Content management system based on CakePHP. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper handling of slugs on the article editing screen. An attacker can manipulate the output of the page by injecting malicious...

7CVSS5.3AI score0.00307EPSS
SaveExploits0References2
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:0 p.m.11 views

2024-10 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 (KB5044095)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:0 p.m.14 views

Azure File Sync Agent v19.1 Release – August 2024 (KB5040924)

Update Rollup for Azure File Sync agent version 19.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

7.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2024/10/08 5:0 p.m.41 views

2024-10 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5044089)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/10/06 11:51 a.m.12 views

MAL-2024-12292 Malicious code in instaread (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56 The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in readarticle.html template and effectively used when the user requests to see t...

6.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/06 11:51 a.m.6 views

Malicious code in instaread (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56 The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in readarticle.html template and effectively used when the user requests to see t...

7AI score
SaveExploits0References2
Circl
Circl
added 2024/09/25 8:13 p.m.14 views

CVE-2024-20433

creationtimestamp| type| source ---|---|--- 2024-09-25 20:13:28+00:00| seen| https://t.me/cvedetector/6352 2025-01-04 23:04:57+00:00| seen| https://www.jerrygamblin.com/2025/01/05/2024-cve-data-review/ 2025-01-04 23:04:57+00:00| seen| https://www.jerrygamblin.com/2025/01/05/2024-cve-data-review/...

8.6CVSS4.8AI score0.0063EPSS
SaveExploits0References2
Microsoft Security Update
Microsoft Security Update
added 2024/09/10 5:0 p.m.25 views

2024-09 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5043064)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2024/09/10 5:0 p.m.28 views

2024-09 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5043064)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

7.2AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2024/09/10 5:0 p.m.24 views

2024-09 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5043064)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/09/06 12:0 a.m.9 views

CVE-2024-44839

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the articleid parameter at /default/article.php...

9.8CVSS8.2AI score0.00492EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/09/06 12:0 a.m.11 views

OpenRapid RapidCMS 安全漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and simple to use CMS system. A security vulnerability exists in OpenRapid RapidCMS v1.3.1, which originates from a SQL injection vulnerability via the articleid parameter on /default/article.php...

9.8CVSS8AI score0.00492EPSS
SaveExploits1References2
Rows per page
Query Builder