Lucene search
K

868 matches found

CNVD
CNVD
added 2019/10/11 12:0 a.m.1 views

WordPress display-widgets plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. display-widgets is a widget display plugin used in it. A cross-site scripting vulnerability exists in WordPress display-widgets...

5.4CVSS6.2AI score0.00227EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/11 12:0 a.m.1 views

Magento cross-site scripting vulnerability (CNVD-2019-34461)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento cross-site scripting vulnerability , the vulnerability stems from the lack of WEB applications on the...

5.4CVSS6.7AI score0.00148EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

WordPress Royal-Slider plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Royal-Slider is a responsive image gallery and content slider plugin used in it. A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00359EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.2 views

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33852)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

5.4CVSS6.4AI score0.00173EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33853)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

5.4CVSS6.4AI score0.00169EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.2 views

Couchbase Server Cross-Site Scripting Vulnerability

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . A cross-site scripting vulnerability exists in Couchbase Server versions 5.5.0 and...

6.1CVSS6.3AI score0.00185EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

WordPress Postmatic Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Postmatic is a web comment notification and reply plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

6.1CVSS6.3AI score0.0019EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.0 views

WordPress sitepress-multilingual-cms (WPML) plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sitepress-multilingual-cms WPML plugin is a website multilingual support plugin used in it. A cross-site scripting vulnerability exist...

6.1CVSS6.3AI score0.0019EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.5 views

WordPress wp-symposium plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-symposium is a social networking plugin used in it. A cross-site scripting vulnerability exists in the WordPress wp-symposium plugi...

6.1CVSS6.3AI score0.03076EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.1 views

Flower Cross-Site Scripting Vulnerability (CNVD-2019-35802)

Flower is a web-based tool for monitoring and managing Celery clusters. A cross-site scripting vulnerability exists in Flower version 0.9.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...

6.1CVSS6.4AI score0.0024EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.1 views

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33854)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

5.4CVSS6.4AI score0.00229EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/29 12:0 a.m.1 views

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-33855)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

5.4CVSS6.4AI score0.00156EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.1 views

CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2019-34784)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

5.4CVSS6.3AI score0.00273EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.1 views

CloudBees Jenkins URL setting cross-site scripting vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

4.8CVSS6.3AI score0.00353EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/27 12:0 a.m.2 views

CloudBees Jenkins and LTS Cross-Site Scripting Vulnerability (CNVD-2019-34785)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

5.4CVSS6.3AI score0.00273EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/25 12:0 a.m.2 views

Joomla! cross-site scripting vulnerability (CNVD-2020-12779)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in Joomla! The vulnerability stems from a lack of proper validation of client-side data in the WEB...

6.1CVSS6.4AI score0.03926EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/25 12:0 a.m.1 views

DOMPurify Cross-Site Scripting Vulnerability

DOMPurify is a DOM Document Object Model written in JavaScript for HTML, MathML and SVG. A cross-site scripting vulnerability exists in versions of DOMPurify prior to 2.0.1, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker...

6.1CVSS6.4AI score0.00962EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/23 12:0 a.m.1 views

WordPress ScoreMe theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ScoreMe theme is a theme plugin used to build sites with user ratings. A cross-site scripting vulnerability exists in WordPress ScoreMe...

5.4CVSS6.2AI score0.01842EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/23 12:0 a.m.1 views

PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2019-35827)

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A cross-site scripting vulnerability exists in the admin/infoclassupdate.php file in version 5.6 of PHPMyWind, which stems from the lack of proper validation of client-side data in the WEB applicati...

4.8CVSS6.4AI score0.00323EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/23 12:0 a.m.3 views

WordPress music-store plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. music-store is an online music store plugin used in it. A cross-site scripting vulnerability exists in WordPress music-store plugin...

6.1CVSS6.2AI score0.00258EPSS
Exploits1References1
Rows per page
Query Builder