Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/01 12:00 a.m.•7 views

CVE-2024-13901: Improper Neutralization of Input During Web Page Generation

The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This...

4.8CVSS5.9AI score0.00287EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/04/03 12:00 a.m.•26 views

virtuoso-opensource DoS

The vulnerability of the boxadd function in the virtuoso-opensource web application development platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures after executing the SELECT operator...

7.8CVSS7.2AI score0.0083EPSS
SaveExploits1References3Affected Software2
attackerkb
attackerkb
•added 2023/11/29 8:15 p.m.•18 views

CVE-2023-48949

An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

7.5CVSS7.1AI score0.0083EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2023/11/29 8:15 p.m.•13 views

UBUNTU-CVE-2023-48949

An issue in the boxadd function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

7.5CVSS5.8AI score0.0083EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/11/29 12:00 a.m.•14 views

PT-2023-8881 · Openlink +2 · Virtuoso-Opensource +2

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue is related to the box add function in the virtuoso-opensource platform, which allows attackers to cause a Denial of Service DoS after running a SELECT statement. This is due t...

8.8CVSS6.8AI score0.00902EPSS
SaveExploits3References14
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•18 views

Vagrant 安全漏洞

Vagrant is a command line utility for managing the lifecycle of virtual machines. Isolates dependencies and their configurations in a single disposable and consistent environment. Vagrant has a security vulnerability that stems from the boxAdd function not being cleaned up correctly...

9.8CVSS8.2AI score0.00987EPSS
SaveExploits0References2
Rows per page
Query Builder