Lucene search
K

2672 matches found

Cvelist
Cvelist
added 2023/04/14 12:0 a.m.14 views

CVE-2023-27643

An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library...

7.6AI score0.00777EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/04/14 12:0 a.m.4 views

POWERAMP 资源管理错误漏洞

POWERAMP is a music player for Android. A security vulnerability exists in POWERAMP that could allow an attacker to cause a denial of service via the Rescan button and Select Folders button...

7.5CVSS7.3AI score0.00777EPSS
Exploits1References4
NVD
NVD
added 2023/04/10 4:15 a.m.12 views

CVE-2014-125097

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS4.5AI score0.00346EPSS
Exploits0References3
Prion
Prion
added 2023/04/10 4:15 a.m.11 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

5.8CVSS6.5AI score0.00346EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/10 3:0 a.m.20 views

CVE-2014-125097 BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely...

4CVSS6AI score0.00346EPSS
Exploits0References3
CVE
CVE
added 2023/04/10 3:0 a.m.63 views

CVE-2014-125097

Affected software: WordPress plugin BestWebSoft Facebook Like Button (versions up to 2.33). Vulnerable component: fcbkbttn_settings_page in facebook-button-plugin.php. Issue: cross‑site scripting vulnerability exploitable remotely. Impact: allows user interaction required; results include potenti...

6.1CVSS4.8AI score0.00346EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2023/04/10 12:15 a.m.17 views

CVE-2012-10012

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

8.8CVSS5.8AI score0.00197EPSS
Exploits0References3
Prion
Prion
added 2023/04/10 12:15 a.m.14 views

Cross site request forgery (csrf)

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

6.8CVSS7.1AI score0.00197EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/10 12:0 a.m.4 views

PT-2023-10165 · Bestwebsoft · Bestwebsoft Facebook Like Button

Name of the Vulnerable Software and Affected Versions: BestWebSoft Facebook Like Button versions up to 2.33 Description: A problematic issue was found, affecting the function fcbkbttn settings page of the file facebook-button-plugin.php. This leads to cross-site scripting and can be launched...

6.1CVSS6.5AI score0.00346EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.4 views

WordPress plugin BestWebSoft Facebook Like Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS4.7AI score0.00346EPSS
Exploits0References4
CVE
CVE
added 2023/04/09 11:31 p.m.59 views

CVE-2012-10012

CVE-2012-10012 affects BestWebSoft Facebook Like Button (versions up to 2.13). The vulnerability exists in the fcbk_bttn_plgn_settings_page function of facebook-button-plugin.php, enabling cross-site request forgery (CSRF) and can be exploited remotely. A patch is available (commit: 33144ae5a45ed...

8.8CVSS6.5AI score0.00197EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/04/09 11:31 p.m.21 views

CVE-2012-10012 BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery

A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbkbttnplgnsettingspage of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be...

5CVSS8.8AI score0.00197EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/04/09 12:0 a.m.5 views

PT-2023-9949 · Bestwebsoft · Bestwebsoft Facebook Like Button

Name of the Vulnerable Software and Affected Versions: BestWebSoft Facebook Like Button versions up to 2.13 Description: A vulnerability has been found in the function fcbk bttn plgn settings page of the file facebook-button-plugin.php, leading to cross-site request forgery. The attack can be...

8.8CVSS7.1AI score0.00197EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/04/09 12:0 a.m.3 views

WordPress Plugin BestWebSoft Facebook Like Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin BestWebSoft Facebook Like...

8.8CVSS5.6AI score0.00197EPSS
Exploits0References5
NVD
NVD
added 2023/04/05 8:15 a.m.15 views

CVE-2023-26536

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

6.5CVSS6.1AI score0.00181EPSS
Exploits0References1
OSV
OSV
added 2023/04/05 8:15 a.m.2 views

CVE-2023-26536

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

5.4CVSS6.7AI score0.00181EPSS
Exploits0References1
Prion
Prion
added 2023/04/05 8:15 a.m.15 views

Cross site scripting

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Jonk @ Follow me Darling Sptify Play Button for WordPress plugin = 2.05 versions...

4.9CVSS5.3AI score0.00181EPSS
Exploits0References1Affected Software1
Huntr
Huntr
added 2023/04/05 8:7 a.m.19 views

Browser back attack vulnerability

Description rosariosis has a vulnerability that allows user to return to a page containing personally identifiable information PII and sensitive information even after logging out of the application by using the browser's back button. This issue poses a significant risk to the confidentiality of...

4CVSS6.1AI score0.0023EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.1 views

WordPress plugin Sptify Play Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS6.5AI score0.00181EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/04/04 8:15 p.m.0 views

CVE-2023-1840

The Sptify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.8CVSS6AI score0.00242EPSS
Exploits0References3
Rows per page
Query Builder