Lucene search
+L

10365 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/14 1:02 a.m.6 views

Malicious code in concord-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7557a87ec03b1b952655ca887ba93d78eb3e94a2674fbc2e2d2b86fae5272dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.13 views

WordPress Plugin Post SMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.2CVSS6.6AI score0.00496EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.10 views

WordPress Plugin FluentSMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.2CVSS6.7AI score0.00605EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.8 views

WordPress Plugin Lana Email Logger 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.2CVSS6.6AI score0.00462EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.56 views

WordPress Plugin Mail Queue 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists...

7.2CVSS6.6AI score0.00443EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.10 views

WordPress Plugin GD Mail Queue 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.2CVSS6.6AI score0.00466EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.14 views

WordPress Plugin WP Mail Log 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.2CVSS6.6AI score0.00462EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.9 views

WordPress Plugin WP Mail Catcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.2CVSS6.6AI score0.00466EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.12 views

WordPress Plugin WP Reroute Email 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.2CVSS6.6AI score0.00462EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.8 views

WordPress Plugin Mail Control 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.2CVSS6.6AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.6 views

WordPress Plugin About Me 3000 widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6.3AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.14 views

WordPress Plugin WP Mail Logging 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

7.2CVSS6.6AI score0.00654EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.9 views

WordPress Plugin Mailtree Log Mail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. WordPress Plugin Mailtree Log Mail suffers...

7.2CVSS6.7AI score0.00462EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.9 views

WordPress Plugin YaySMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin YaySMTP suffers from a...

7.2CVSS6.6AI score0.00462EPSS
SaveExploits0References3
OSV
OSV
added 2023/07/11 5:15 p.m.5 views

DEBIAN-CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

7.5CVSS6.4AI score0.01606EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/11 5:15 p.m.9 views

UBUNTU-CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

7.5CVSS6.7AI score0.01606EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.12 views

The vulnerability of My Cloud OS, a network storage operating system, allows a perpetrator to execute arbitrary commands.

The vulnerability of My Cloud OS network storage systems is related to the lack of measures for data cleanup at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.8CVSS7AI score0.01315EPSS
SaveExploits0References4Affected Software9
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.16 views

The vulnerability of My Cloud OS, a network storage operating system, allows a perpetrator to execute arbitrary commands.

The vulnerability of My Cloud OS network storage systems is related to the lack of measures for data cleanup at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.8CVSS8AI score0.00866EPSS
SaveExploits0References4Affected Software9
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.10 views

PiiGAB M-Bus 代码注入漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A code injection vulnerability exists in PiiGAB M-Bus version 900S, which stems from an inability to properly clean up user input and could allow an attacker to inje...

9.8CVSS8.6AI score0.00759EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.10 views

Mastodon 跨站脚本漏洞

Mastodon is an open source social network server based on ActivityPub. Mastodon suffers from a cross-site scripting vulnerability. An attacker exploits this vulnerability to bypass HTML cleanup and include arbitrary HTML in oEmbed preview cards...

9.3CVSS7.4AI score0.01217EPSS
SaveExploits0References7
Rows per page
Query Builder