Lucene search
+L

216202 matches found

EUVD
EUVD
added 2026/06/08 1:55 a.m.26 views

EUVD-2021-34850

WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at...

6.4CVSS5.3AI score0.00187EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/08 1:55 a.m.16 views

CVE-2021-47984

WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at...

6.4CVSS5.3AI score0.00187EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/06/08 1:55 a.m.66 views

CVE-2021-47984 WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS

WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at...

6.4CVSS0.00187EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/08 1:55 a.m.19 views

EUVD-2021-34849

WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settingscurrencycode parameter. Attackers can submit POST requests to /wp-admin/options.php with script...

6.4CVSS5.6AI score0.00187EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/08 1:55 a.m.65 views

CVE-2021-47982 WordPress Plugin WP-Paginate 2.1.3 Stored XSS via preset

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. Attackers can submit POST requests to the plugin settings page with script payloads in the preset parameter...

6.4CVSS0.00187EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/08 1:55 a.m.10 views

CVE-2021-47982

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. Attackers can submit POST requests to the plugin settings page with script payloads in the preset parameter...

6.4CVSS5.2AI score0.00187EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/06/08 1:55 a.m.41 views

CVE-2021-47982

Summary: CVE-2021-47982 affects WordPress plugin WP-Paginate 2.1.3 with a stored XSS via the preset parameter. Authenticated attackers can submit payloads in the preset field through the plugin settings page; payloads are stored and later executed when administrators view the settings. The record...

6.4CVSS5.2AI score0.00187EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/08 1:55 a.m.23 views

EUVD-2021-34848

WordPress Plugin WP-Paginate 2.1.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the preset parameter. Attackers can submit POST requests to the plugin settings page with script payloads in the preset parameter...

6.4CVSS5.2AI score0.00187EPSS
SaveExploits0References3
Redos
Redos
added 2026/06/08 12:00 a.m.17 views

ROS-20260608-73-0004

The vulnerability of the .NET software platform lies in the execution of a loop with an exit condition that is not met. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS5.8AI score0.0243EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.27 views

PT-2026-47230

WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at...

6.4CVSS5.3AI score0.00187EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.27 views

student_management_system 安全漏洞

studentmanagementsystem is a student information management tool personally developed by Vivek Singh. There is a security vulnerability in studentmanagementsystem, which stems from improper handling of functions in the /add.php file within the Student Record Handler component. This may lead to...

6.5CVSS6.3AI score0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.19 views

Bank Management System 安全漏洞

Bank Management System is a banking management system developed by Alien developers. There is a security vulnerability in Bank Management System, which stems from operations in the TransactionEndpoint component file...

6.5CVSS6.3AI score0.00272EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.22 views

OpenVPN 安全漏洞

OpenVPN is a software package developed by OpenVPN Inc. in the United States, used to create encrypted VPN tunnels. It utilizes the OpenSSL library to encrypt data and control information, and allows the created VPNs to use public keys, electronic certificates, or username/password for...

6.9CVSS5.3AI score0.00541EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.21 views

WordPress plugin Recipe Card Blocks Lite 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.3AI score0.00206EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.15 views

The vulnerability of the Media component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

3.1CVSS5.9AI score0.00145EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.13 views

The vulnerability of the Preload function in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Preload function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

5CVSS5.9AI score0.00163EPSS
SaveExploits0References7Affected Software5
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.21 views

OpenBullet2 路径遍历漏洞

OpenBullet2 is a cross-platform automated testing and data scraping tool developed by the OpenBullet team. Versions of OpenBullet2 prior to 0.3.2 contained a path traversal vulnerability. This vulnerability originated from the wordlist endpoint’s path traversal flaw, which could allow authenticat...

8.8CVSS6.7AI score0.00566EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.12 views

The vulnerability of the golang-x-image package, a programming language, allows attackers to trigger a service failure.

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures...

6.1CVSS5.8AI score0.00112EPSS
SaveExploits0References6Affected Software10
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.13 views

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

3.1CVSS5.8AI score0.00152EPSS
SaveExploits0References7Affected Software5
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.15 views

WordPress plugin WP-Paginate 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.1AI score0.00187EPSS
SaveExploits0References1
Rows per page
Query Builder