Lucene search
+L

10363 matches found

CNNVD
CNNVD
added 2023/06/07 12:00 a.m.11 views

WordPress Plugin Visual Composer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...

5.5CVSS4.9AI score0.00728EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.12 views

WordPress Plugin WP HTML Mail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS6.3AI score0.0075EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.11 views

WordPress Plugin WP Quick FrontEnd Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.4CVSS5.6AI score0.00492EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.6 views

WordPress Plugin Pretty Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.2CVSS6.1AI score0.00749EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.7 views

WordPress Plugin DELUCKS SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.2CVSS6.1AI score0.00803EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.11 views

WordPress Plugin WP Quick FrontEnd Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.1CVSS5.9AI score0.0075EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/05 2:22 p.m.6 views

Malicious code in fc-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f6035edb9c1d932bd670b4ecd252c5ad1d38ae3ff39f0f2d3e68ca68a1d99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/05 12:00 a.m.10 views

WordPress plugin Stop Spammers Security | Block Spam Users, Comments, Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.8CVSS6.3AI score0.00442EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/06/03 12:00 a.m.8 views

WordPress Plugin Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS7AI score0.0048EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/06/02 12:00 a.m.11 views

The vulnerability of the bs_SetLimitCli_info function in the /lib/libshare-0.0.26.so library of the LB-LINK router software allows a attacker to gain full access to the device.

The vulnerability of the bsSetLimitCliinfo function in the /lib/libshare-0.0.26.so file of the LB-LINK router software is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full...

10CVSS8.1AI score0.69663EPSS
SaveExploits1References3Affected Software4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/01 4:55 a.m.10 views

Malicious code in @leanmull/ldb-decryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4e66532be866fa2974fbd1653c75fa4bec095ad78503c70b153fb75c8445a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.12 views

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in improper cleaning or release of resources, allowing a intruder to trigger a service failure.

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted GET request...

6.5CVSS5.6AI score0.00322EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.13 views

The vulnerability of the anonymous web browser Tor, related to improper cleaning or release of resources, allows a violator to trigger a service failure.

The vulnerability of the anonymous web browser Tor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.5CVSS7.2AI score0.01244EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2023/05/27 12:00 a.m.7 views

keep-module-latest 命令注入漏洞

keep-module-latest is a library. A security vulnerability exists in keep-module-latest that stems from a lack of input cleanup or other checks, leaving it vulnerable to command injection attacks...

8.4CVSS7.6AI score0.01188EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/27 12:00 a.m.16 views

bwm-ng 命令注入漏洞

bwm-ng is a small and simple console-based real-time network and disk io bandwidth monitor. A security vulnerability exists in bwm-ng that stems from improper input cleanup and is susceptible to command injection attacks...

8.4CVSS7.5AI score0.01005EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/05/27 12:00 a.m.11 views

n158 命令注入漏洞

n158 is a simple way to handle HTTP servers and daemons using NodeJS. A security vulnerability exists in n158, which stems from improper input cleanup in the module.exports function and is vulnerable to command injection attacks...

7.8CVSS7.3AI score0.00986EPSS
SaveExploits0References3
Metasploit
Metasploit
added 2023/05/23 12:00 a.m.558 views

GitLab Authenticated File Read

GitLab version 16.0 contains a directory traversal for arbitrary file read as the gitlab-www user. This module requires authentication for exploitation. In order to use this module, a user must be able to create a project and groups. When exploiting this vulnerability, there is a direct correlati...

10CVSS8.2AI score0.71641EPSS
SaveExploits5
CNNVD
CNNVD
added 2023/05/20 12:00 a.m.9 views

WordPress Plugin Gallery Metabox 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS8.1AI score0.00271EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/20 12:00 a.m.10 views

WordPress Plugin Groundhogg 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS7AI score0.00494EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/05/18 12:00 a.m.24 views

WordPress Plugin Brands for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.5AI score0.00361EPSS
SaveExploits0References2
Rows per page
Query Builder