Lucene search
+L

6667 matches found

CNVD
CNVD
•added 2021/11/10 12:00 a.m.•60 views

WordPress Translate WordPress-Google Language Translator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...

4.8CVSS2.1AI score0.00676EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•61 views

WordPress Storefront Footer Text plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Storefront Footer Text plugin in version 1.0.1 an...

4.8CVSS4.9AI score0.00617EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•35 views

WordPress Unlimited PopUps Plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...

8.8CVSS8.9AI score0.01567EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•23 views

TYPO3 cross-site scripting vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland.TYPO3 has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output, which can be exploited by an attacker with TYP...

5.4CVSS5.6AI score0.00509EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•23 views

Appointment Booking Calendar System Cross-site Script Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Appointment Booking Calendar System...

6.1CVSS5.7AI score0.01284EPSS
SaveExploits0References6
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•100 views

WordPress Booking.com Banner Creator Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....

4.8CVSS4.9AI score0.00617EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•22 views

Airangel Hsmx Gateway Cross-Site Script Vulnerability

Airangel Hsmx Gateway is a platform from Airangel UK. It is used to manage authentication and billing in the network.A cross-site scripting vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from a lack of data validation filtering of user-supplied data and...

5.4CVSS5.6AI score0.00527EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/11/10 12:00 a.m.•60 views

WordPress AddToAny Share Buttons Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress AddToAny Share Buttons plugin in versions prior t...

4.8CVSS4.8AI score0.00676EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/09 3:15 p.m.•34 views

CVE-2021-43187

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

5.3CVSS0.00793EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/09 3:15 p.m.•31 views

Information disclosure

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

5CVSS5AI score0.00793EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/11/09 2:40 p.m.•85 views

CVE-2021-43187

CVE-2021-43187 affects YouTrack Mobile (JetBrains). In YouTrack Mobile before 2021.2, the iOS client-side cache could contain sensitive information, enabling information disclosure. The issue is documented across multiple sources (NVD entry and Red Hat/CNVD mirrors) with this vulnerability class....

5.3CVSS5AI score0.00793EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/09 2:40 p.m.•47 views

CVE-2021-43187

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

6.3AI score0.00793EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/09 12:00 a.m.•6 views

CVE-2021-43187: Undefined Security Weakness

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

5.3CVSS5.8AI score0.00793EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/09 12:00 a.m.•4 views

PT-2021-23769

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack Mobile versions prior to 2021.2 Description The client-side cache on iOS could contain sensitive information. Recommendations For versions prior to 2021.2, update to version 2021.2 or later to resolve the issue...

5.3CVSS0.00793EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/11/09 12:00 a.m.•21 views

JetBrains YouTrack security vulnerabilities

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from a client-side cache on iOS that could contain sensitive information. An attacker could use...

5.3CVSS5.6AI score0.00793EPSS
SaveExploits0References2
Huntr
Huntr
•added 2021/11/08 10:34 a.m.•12 views

in cortezaproject/corteza-server

Description There's no bound limit to the number of "characters/special characters" in the name field of the user. Vulnerable Field: Full Name By sending a very long string it’s possible to cause a denial a service attack on the server. This may lead to the website becoming unavailable or...

SaveExploits0
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•26 views

WordPress cross-site scripting vulnerabilities

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Booking.com Banner Creator plugin in version 1.4....

4.8CVSS5.7AI score0.00617EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•20 views

JetBrains YouTrack Cross-site Scripting Vulnerabilities

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software has features such as bug tracking, creating workflows and monitoring project progress. A cross-site scripting vulnerability exists in JetBrains YouTrack, which stems from...

5.4CVSS5.3AI score0.00655EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•22 views

SourceCodester Tailor Management Cross-site Scripting Vulnerabilities

SourceCodester Tailor Management is an open source tailor management system software from the individual developer Warren Daloyan. A security vulnerability exists in SourceCodester Tailor Management, which stems from a lack of proper validation of client-side data in the web application. An...

6.1CVSS6.4AI score0.00662EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•24 views

WordPress plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. Translate WordPress-Google Language Translator prior to version 6.0.12 suffers from a cross-site scripting vulnerability, which...

4.8CVSS5.6AI score0.00676EPSS
SaveExploits2References3
Rows per page
Query Builder