Lucene search
K

9 matches found

CNNVD
CNNVD
added 2024/04/10 12:0 a.m.2 views

Enpass Password Manager 安全漏洞

Enpass Password Manager is a cross-platform offline password manager from Enpass. A security vulnerability exists in Enpass Password Manager version 6.9.2, which stems from an HTML injection vulnerability that allows an attacker to run arbitrary HTML code by creating carefully crafted comments...

8.8CVSS7.4AI score0.00188EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/13 1:13 a.m.7 views

Moodle allows remote authenticated users to cause a denial of service (invalid database records)

Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service invalid database records via a series of crafted comments operations...

4CVSS6.7AI score0.00565EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2021/06/09 12:15 p.m.15 views

CVE-2021-33829

A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...

6.1CVSS0.65532EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/06/09 12:0 a.m.1 views

CKEditor 跨站脚本漏洞

CKEditor is an open source, web-based text editor. CKEditor suffers from a cross-site scripting vulnerability that stems from improper handling of input data in the HTML data processor. A remote attacker can inject executable JavaScript code via a crafted comment. The following products and model...

6.1CVSS6.6AI score0.65532EPSS
Exploits0References12
CNVD
CNVD
added 2020/11/10 12:0 a.m.2 views

Atlassian Jira gajira-create code execution vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. gajira-comment is a Jira plugin for configuring Jira comment operations. Atlassian gajira-create A security vulnerability exists...

9.8CVSS7.8AI score0.02136EPSS
Exploits0References1
NVD
NVD
added 2012/07/16 10:28 a.m.10 views

CVE-2011-4292

Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service invalid database records via a series of crafted comments operations...

4CVSS6.2AI score0.00565EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2012/07/16 10:28 a.m.15 views

CVE-2011-4292

Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service invalid database records via a series of crafted comments operations...

4CVSS5.9AI score0.00565EPSS
Exploits0References1
Prion
Prion
added 2012/07/16 10:28 a.m.10 views

Code injection

Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service invalid database records via a series of crafted comments operations...

4CVSS6.7AI score0.00565EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2012/07/16 10:0 a.m.14 views

CVE-2011-4292

Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service invalid database records via a series of crafted comments operations...

6.1AI score0.00565EPSS
Exploits0References3
Rows per page
Query Builder