Lucene search
+L

442 matches found

NVD
NVD
•added 2025/02/03 3:15 p.m.•9 views

CVE-2025-23591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blulogistics1 blu Logistics blu-logistics allows Reflected XSS.This issue affects blu Logistics: from n/a through = 1.0.0...

7.1CVSS0.00315EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 2:22 p.m.•64 views

CVE-2025-23591

CVE-2025-23591 is an XSS vulnerability affecting the WordPress plugin blu Logistics (blu Logistics) with versions up to 1.0.0. The Red Hat and NVD entries describe an improper neutralization of input during web page generation that permits Reflected XSS for Blu Logistics, impacting the plugin’s h...

7.1CVSS7.2AI score0.00315EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/03 2:22 p.m.•7 views

CVE-2025-23591 WordPress blu Logistics plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blu Logistics Pte. Ltd. blu Logistics allows Reflected XSS. This issue affects blu Logistics: from n/a through 1.0.0...

7.1CVSS6.9AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/03 2:22 p.m.•23 views

CVE-2025-23591 WordPress blu Logistics plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blulogistics1 blu Logistics blu-logistics allows Reflected XSS.This issue affects blu Logistics: from n/a through = 1.0.0...

7.1CVSS0.00315EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•10 views

WordPress plugin blu Logistics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS7.7AI score0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•14 views

PT-2025-4958 · Unknown · Blu Logistics

Name of the Vulnerable Software and Affected Versions: blu Logistics versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions n/a...

7.1CVSS9.3AI score0.00315EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•11 views

WordPress blu Logistics plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin blu Logistics versions = 1.0.0...

7.1CVSS6.1AI score0.00315EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/11/09 10:15 a.m.•36 views

CVE-2024-50544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

8.5CVSS0.00395EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 9:07 a.m.•81 views

CVE-2024-50544

CVE-2024-50544 : WordPress RSVP ME plugin

8.5CVSS5.9AI score0.00395EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/09 9:07 a.m.•14 views

CVE-2024-50544 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

8.5CVSS5.9AI score0.00395EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•20 views

PT-2024-34322 · Micah Blu · Micah Blu Rsvp Me

Name of the Vulnerable Software and Affected Versions: Micah Blu RSVP ME versions 1.9.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper handling of special elements in an SQL command. This allows for SQL Injection attacks. Recommendations: For Micah...

8.5CVSS8AI score0.00395EPSS
SaveExploits0References6
NVD
NVD
•added 2024/10/28 1:15 p.m.•20 views

CVE-2024-50491

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

9.8CVSS0.01024EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/28 12:37 p.m.•62 views

CVE-2024-50491

CVE-2024-50491 concerns the RSVP ME WordPress plugin (versions

9.8CVSS5.9AI score0.01024EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/04/22 3:15 p.m.•33 views

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

7.8CVSS7.1AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/22 12:00 a.m.•16 views

PT-2024-12704 · Nokia +2 · Nokia C200 +3

Name of the Vulnerable Software and Affected Versions: AT&T Calypso version ATT/U318AA/U318AA:10/QP1A.190711.020/1632369780:user/release-keys Nokia C100 versions Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1 190:user/release-keys through Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1...

5.5CVSS6.3AI score0.00171EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/04/22 12:00 a.m.•44 views

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

7.3AI score0.0019EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/22 12:00 a.m.•77 views

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

7.8CVSS7.3AI score0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/22 12:00 a.m.•15 views

CVE-2023-38299

Various software builds for the AT&T Calypso, Nokia C100, Nokia C200, and BLU View 3 devices leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining...

6.7AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/22 12:00 a.m.•103 views

CVE-2023-38299

Various software builds for the AT&T Calypso , Nokia C100 , Nokia C200 , and BLU View 3 devices leak the device IMEI to a system property. This occurs because a high-privilege process leaks the identifier, which can then be accessed indirectly by any local application without requiring any permis...

6.6AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/22 12:00 a.m.•21 views

CVE-2023-38290

Certain software builds for the BLU View 2 and Sharp Rouvo V Android devices contain a vulnerable pre-installed app with a package name of com.evenwell.fqc versionCode='9020801', versionName='9.0208.01' ; versionCode='9020913', versionName='9.0209.13' ; versionCode='9021203',...

7.4AI score0.0019EPSS
SaveExploits0References1
Rows per page
Query Builder