Lucene search
+L

484 matches found

CNNVD
CNNVD
added 2022/01/19 12:00 a.m.12 views

Naviwebs Navigate CMS 跨站脚本漏洞

Naviwebs Navigate CMS is an open source content management system CMS from Naviwebs, Inc. in the United States. Naviwebs Navigate CMS suffers from a cross-site scripting vulnerability that originates from a lack of proper validation of client-side data by the WEB application. An attacker can...

5.4CVSS5.7AI score0.00438EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/18 12:00 a.m.14 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.2.7 before the existence of...

6.5CVSS5.3AI score0.00664EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/18 12:00 a.m.13 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.Pimcore has cross-site scripting...

6.6CVSS5.6AI score0.0154EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/17 12:00 a.m.11 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress WP Booking System plugin has a cross-site scripting vulnerability in versions prior to 2.0.15...

5.4CVSS5.6AI score0.00675EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/01/13 12:00 a.m.10 views

Halo 跨站脚本漏洞

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability, which stems from the lack of proper validation of client-side data in the WEB application, and can be exploited by an attacker to execute client-side code...

4.8CVSS5.3AI score0.00828EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.17 views

Keystone 跨站脚本漏洞

Keystone is one of the most powerful Node.js headless Cms. used to help you build and scale faster than any other Cms or application framework. keystone suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in web applications. An...

7.1CVSS5.4AI score0.02601EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/03 12:00 a.m.11 views

BeyondTrust Remote Support 跨站脚本漏洞

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

6.1CVSS5.6AI score0.25133EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2021/11/29 12:00 a.m.11 views

TIETEN Acronis Cyber Protect 跨站脚本漏洞

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS5.4AI score0.00451EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/11/23 12:00 a.m.12 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Video Lessons Manager, which stems from a...

4.8CVSS5.1AI score0.00617EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/11/23 12:00 a.m.15 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress BetterLinks suffers from a cross-site scripting vulnerability that stems from a lack of...

5.4CVSS5.6AI score0.00624EPSS
SaveExploits2References2
Prion
Prion
added 2021/11/19 4:15 p.m.33 views

Sql injection

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

9CVSS9.1AI score0.09657EPSS
SaveExploits3References2Affected Software1
CNNVD
CNNVD
added 2021/11/08 12:00 a.m.12 views

PHP 跨站脚本漏洞

PHP is a scripting language that executes on the server side. PHP suffers from a security vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

5.4CVSS5.9AI score0.01635EPSS
SaveExploits4References5
CNNVD
CNNVD
added 2021/11/02 12:00 a.m.17 views

vaadin 跨站脚本漏洞

vaadin vaadin is an open source platform for web application development from Finnish company vaadin. the vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. the vaadin platform includes a set of web components, a Java web...

6.1CVSS6.1AI score0.00986EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/10/25 12:00 a.m.10 views

Nextcloud 代码问题漏洞

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany. nextcloud Contacts application prior to version 4.0.3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side...

6.4CVSS5.6AI score0.00521EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/22 12:00 a.m.16 views

Csdn App 跨站脚本漏洞

Csdn App is an It community software for cell phones from CN Beijing Innovative Lezhi Network Technology Csdn. Csdn APP suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data by the WEB application. An attacker can exploit this vulnerability...

6.1CVSS6.1AI score0.00626EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/21 12:00 a.m.14 views

Alfresco 跨站脚本漏洞

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. Alfresco has a security vulnerabilit...

5.4CVSS5.8AI score0.00551EPSS
SaveExploits0References3
NVD
NVD
added 2021/10/20 7:15 a.m.29 views

CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS0.0016EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.31 views

Memory corruption

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.2CVSS7.5AI score0.0016EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.22 views

Memory corruption

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

7.2CVSS7.5AI score0.0016EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/10/20 7:15 a.m.6 views

CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

8.4CVSS7AI score0.0016EPSS
SaveExploits0References2
Rows per page
Query Builder