Lucene search
+L

696 matches found

CVE
CVE
added 2023/11/30 3:55 p.m.73 views

CVE-2023-44143

CVE-2023-44143 concerns the WordPress Bamboo Columns plugin, affected versions through 1.6.1. The issue is a Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization and insufficient output escaping during web page generation. The exposure can allow attackers with a...

6.5CVSS5.7AI score0.00384EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 3:55 p.m.36 views

CVE-2023-44143 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1...

6.5CVSS6.6AI score0.00384EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.5 views

PT-2023-29127 · Unknown · Bamboo Columns

Name of the Vulnerable Software and Affected Versions: Bamboo Columns versions through 1.6.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious script...

6.5CVSS5.3AI score0.00384EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.4 views

WordPress Plugin Bamboo Columns Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.7 views

Free and Open Source Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

9.8CVSS8.4AI score0.00796EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/11/27 12:0 a.m.7 views

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

9.8CVSS8.4AI score0.00805EPSS
SaveExploits1References3
OSV
OSV
added 2023/11/22 11:15 p.m.6 views

CVE-2023-47812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...

5.4CVSS7.3AI score0.00416EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/22 11:15 p.m.29 views

CVE-2023-47812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...

6.5CVSS0.00416EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/22 11:15 p.m.19 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...

4.9CVSS7.1AI score0.00416EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/22 10:40 p.m.38 views

CVE-2023-47812 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bamboo Mcr Bamboo Columns plugin = 1.6.1 versions...

6.5CVSS6.7AI score0.00416EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/22 10:40 p.m.88 views

CVE-2023-47812

CVE-2023-47812 affects Bamboo Columns (WordPress) ≤ 1.6.1. It is a Stored XSS vulnerability triggered by input during web page generation, requiring authenticated Contributor+ access. Desktop/public impact: injection of scripts on pages viewed by users. Remediation status in the provided docs is ...

6.5CVSS6AI score0.00416EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/22 6:15 p.m.5 views

CVE-2023-43887

Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...

8.1CVSS6AI score0.00979EPSS
SaveExploits1References4
OSV
OSV
added 2023/11/22 6:15 p.m.3 views

DEBIAN-CVE-2023-43887

Libde265 v1.0.12 was discovered to contain multiple buffer overflows via the numtilecolumns and numtilerow parameters in the function picparameterset::dump...

8.1CVSS6.4AI score0.00979EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/22 4:15 p.m.5 views

CVE-2023-5708

The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS7AI score0.0043EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/22 4:15 p.m.22 views

Cross site scripting

The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

4.9CVSS5.9AI score0.0043EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/22 3:33 p.m.27 views

CVE-2023-5708 WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0043EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/22 3:33 p.m.85 views

CVE-2023-5708

CVE-2023-5708 affects WP Post Columns plugin for WordPress (

6.4CVSS5.2AI score0.0043EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/11/22 12:0 a.m.6 views

WordPress Plugin Bamboo Columns Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6AI score0.00416EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.11 views

PT-2023-8875 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.12 Description: The issue is related to a buffer overflow in the pic parameter set::dump function of the h.265 Libde265 video codec, specifically through the num tile columns and num tile row parameters. This could allow ...

9.4CVSS7.7AI score0.00979EPSS
SaveExploits6References54
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.7 views

PT-2023-32281 · WordPress · Wp Post Columns

Name of the Vulnerable Software and Affected Versions: WP Post Columns plugin for WordPress versions up to, and including, 2.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'column' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS5.5AI score0.0043EPSS
SaveExploits0References5
Rows per page
Query Builder