Lucene search
+L

62 matches found

OSV
OSV
added 2025/03/18 5:48 a.m.5 views

MAL-2025-2517 Malicious code in near-crossword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d0bfa084a2c49bd79b6bf04b30549426c23beb5a5c3feb7ace2146642b006e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/18 5:48 a.m.4 views

Malicious code in near-crossword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d0bfa084a2c49bd79b6bf04b30549426c23beb5a5c3feb7ace2146642b006e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Fedora
Fedora
added 2024/10/09 12:17 a.m.27 views

[SECURITY] Fedora 41 Update: crosswords-0.3.13.3-4.fc41

A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...

5.6CVSS7AI score0.0034EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/06/07 12:00 a.m.10 views

Fedora: Security Advisory for libipuz (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.11 views

Fedora: Security Advisory for libipuz (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.6 views

Fedora: Security Advisory for libipuz (FEDORA-2024-e4717532c4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/05/27 12:00 a.m.4 views

Fedora: Security Advisory for libipuz (FEDORA-2024-4d785e16a2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2024/05/26 1:28 a.m.17 views

[SECURITY] Fedora 40 Update: libipuz-0.4.6.2-2.fc40

This is a library for parsing .ipuz puzzle files, for crossword puzzles, sudokus, etc. The library only handles crosswords for now...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2024/05/25 1:11 a.m.16 views

[SECURITY] Fedora 39 Update: libipuz-0.4.6.2-1.fc39

This is a library for parsing .ipuz puzzle files, for crossword puzzles, sudokus, etc. The library only handles crosswords for now...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2024/05/25 1:05 a.m.39 views

[SECURITY] Fedora 40 Update: crosswords-0.3.13-1.fc40

A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...

7.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/05/08 2:28 a.m.13 views

guardiancrosswordanswers.com Cross Site Scripting vulnerability OBB-3306089

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
OSV
OSV
added 2022/09/23 2:15 p.m.11 views

CVE-2022-37330

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References2
NVD
NVD
added 2022/09/23 2:15 p.m.18 views

CVE-2022-37330

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS0.00466EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/23 1:33 p.m.76 views

CVE-2022-37330

CVE-2022-37330 affects the WordPress WHA Crossword plugin 1.1.10 and earlier. The issue is an authenticated Stored Cross-Site Scripting (XSS) vulnerability where parameters are not properly sanitised/escaped, enabling a Contributor+ to inject script that could affect other users. The root cause i...

5.4CVSS5.2AI score0.00466EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/23 1:33 p.m.7 views

CVE-2022-37330 WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS5.2AI score0.00466EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/23 1:33 p.m.38 views

CVE-2022-37330 WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerability in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS5.4AI score0.00466EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/23 12:00 a.m.5 views

WordPress plugin WHA Crossword 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00466EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/23 12:00 a.m.7 views

PT-2022-23930 · Unknown · Wha Crossword Plugin

Name of the Vulnerable Software and Affected Versions: WHA Crossword plugin version 1.1.10 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with contributor or higher privileges can inject malicious script...

5.4CVSS5.1AI score0.00466EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/21 8:15 p.m.11 views

CVE-2022-36365

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS5.8AI score0.00602EPSS
SaveExploits1References2
NVD
NVD
added 2022/09/21 8:15 p.m.31 views

CVE-2022-36365

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

5.4CVSS0.00602EPSS
SaveExploits1References2
Rows per page
Query Builder