Lucene search
+L

468 matches found

CNNVD
CNNVD
added 2022/01/28 12:0 a.m.6 views

Calibre-Web 跨站脚本漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web before 0.6.16, which stems from the WEB application's lack of proper validation of client-side data. An attacker could exploit the vulnerability ...

8.5CVSS7.3AI score0.00853EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/28 12:0 a.m.9 views

livehelperchat 跨站脚本漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. A security vulnerability exists in livehelperchat that stems from the WEB application's lack of proper validation of client data. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.8AI score0.00547EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.12 views

ForestBlog 跨站脚本漏洞

ForestBlog is an application. A personal blog. ForestBlog suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute JavaScript code on the client side...

6.1CVSS5.6AI score0.00588EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/23 12:0 a.m.7 views

AppCMS 跨站脚本漏洞

AppCMS is a content management system CMS for mobile application downloads. a cross-site scripting vulnerability exists in AppCMS, which stems from the lack of proper validation of client-side data in the WEB application. An attacker could exploit this vulnerability to execute client-side code...

6.1CVSS5.3AI score0.02542EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.8 views

Naviwebs Navigate CMS 跨站脚本漏洞

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. Naviwebs Navigate CMS suffers from a cross-site scripting vulnerability that originates from a lack of proper validation of client-side data by the WEB application. An attacker can...

5.4CVSS5.7AI score0.00438EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.8 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.2.7 before the existence of...

6.5CVSS5.3AI score0.00664EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.8 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.Pimcore has cross-site scripting...

6.6CVSS5.6AI score0.0154EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.7 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress WP Booking System plugin has a cross-site scripting vulnerability in versions prior to 2.0.15...

5.4CVSS5.6AI score0.00675EPSS
Exploits2References3
CNNVD
CNNVD
added 2022/01/13 12:0 a.m.5 views

Halo 跨站脚本漏洞

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability, which stems from the lack of proper validation of client-side data in the WEB application, and can be exploited by an attacker to execute client-side code...

4.8CVSS5.3AI score0.00828EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.9 views

Keystone 跨站脚本漏洞

Keystone is one of the most powerful Node.js headless Cms. used to help you build and scale faster than any other Cms or application framework. keystone suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in web applications. An...

7.1CVSS5.4AI score0.02601EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/03 12:0 a.m.7 views

BeyondTrust Remote Support 跨站脚本漏洞

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

6.1CVSS5.6AI score0.28207EPSS
Exploits3References5
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.7 views

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS5.4AI score0.00451EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.6 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Video Lessons Manager, which stems from a...

4.8CVSS5.1AI score0.00598EPSS
Exploits2References2
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.8 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress BetterLinks suffers from a cross-site scripting vulnerability that stems from a lack of...

5.4CVSS5.6AI score0.00604EPSS
Exploits2References2
Prion
Prion
added 2021/11/19 4:15 p.m.25 views

Sql injection

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

9CVSS9.1AI score0.09509EPSS
Exploits3References2Affected Software1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.6 views

PHP 跨站脚本漏洞

PHP is a scripting language that executes on the server side. PHP suffers from a security vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.9AI score0.01635EPSS
Exploits4References5
CNNVD
CNNVD
added 2021/11/02 12:0 a.m.6 views

vaadin 跨站脚本漏洞

vaadin vaadin is an open source platform for web application development from Finnish company vaadin. the vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. the vaadin platform includes a set of web components, a Java web...

6.1CVSS6.1AI score0.00955EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/10/25 12:0 a.m.5 views

Nextcloud 代码问题漏洞

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. nextcloud Contacts application prior to version 4.0.3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side...

6.4CVSS5.6AI score0.00504EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/10/22 12:0 a.m.8 views

Csdn App 跨站脚本漏洞

Csdn App is an It community software for cell phones from CN Beijing Innovative Lezhi Network Technology Csdn. Csdn APP suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability...

6.1CVSS6.1AI score0.00606EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.6 views

Alfresco 跨站脚本漏洞

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. Alfresco has a security vulnerabilit...

5.4CVSS5.8AI score0.00534EPSS
Exploits0References3
Rows per page
Query Builder