Lucene search
+L

11509 matches found

osv_cve
osv_cve
•added 2022/03/15 6:15 p.m.•23 views

CVE-2022-25489

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php...

5.4CVSS5.7AI score0.01459EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2022/03/15 12:00 a.m.•22 views

Atom CMS: Cross-site Scripting Vulnerabilities

Atom CMS, a content management system, is vulnerable to a cross-site scripting vulnerability in Atom CMS v2.0. The vulnerability is caused by a cross-site scripting vulnerability that contains a reflection in the "A" parameter in /widgets/debug.php. An attacker could exploit this vulnerability to...

5.4CVSS5.2AI score0.01459EPSS
SaveExploits2References2
NVD
NVD
•added 2022/03/11 6:15 p.m.•43 views

CVE-2021-33150

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

6.8CVSS0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/03/11 5:54 p.m.•59 views

CVE-2021-33150

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

7.1AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•6 views

CVE-2021-33150: Undefined Security Weakness

Hardware allows activation of test or debug logic at runtime for some IntelR Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

6.8CVSS6.4AI score0.00351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•20 views

PT-2022-11711 · Riverbed · Steelcentral Appinternals Dynamic Sampling Agent

Name of the Vulnerable Software and Affected Versions: SteelCentral AppInternals Dynamic Sampling Agent DSA affected versions not specified Description: A security issue was found in the SteelCentral AppInternals Dynamic Sampling Agent DSA, where it uses a ".debug command.config" file to store a...

7.8CVSS7.5AI score0.00223EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/03/04 6:32 a.m.•30 views

Information Disclosure

uppy is vulnerable to information disclosure. The vulnerability exists due to an insecure debug flag which allow Local Urls by default...

7.5CVSS1.5AI score0.00997EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•6 views

PT-2025-8193

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc4+ Description A sleep-in-atomic bug has been identified in the Linux kernel, caused by the genpd debug remove function being called with a spinlock held. This issue occurs when a genpd with GENPD FLAG I...

5.5CVSS0.00268EPSS
SaveExploits0
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•13 views

WordPress Quick Contact Form plugin < 8.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Quick Contact Form plugin versions 8.0.2. Solution Update the WordPress Quick Contact Form plugin to the latest available version at least 8.0.2...

4.6AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•19 views

WordPress Yet Another Stars Rating plugin < 3.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Yet Another Stars Rating plugin versions 3.0.2. Solution Update the WordPress Yet Another Stars Rating plugin to the latest available version at least 3.0.2...

4.3AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•12 views

WordPress Advance Search for WooCommerce plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advance Search for WooCommerce plugin versions = 2.0.3. Solution No patched version available...

3.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•14 views

WordPress WooCommerce Product Attachment plugin <= 2.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Product Attachment plugin versions = 2.1.2. Solution Update the WordPress WooCommerce Product Attachment plugin to the latest available version at least 2.1.3...

4.3AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•27 views

WordPress FooBox Image Lightbox plugin < 2.7.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress FooBox Image Lightbox plugin versions 2.7.17. Solution Update the WordPress FooBox Image Lightbox plugin to the latest available version at least 2.7.17...

3.2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•15 views

WordPress WooCommerce Quick Reports plugin <= 2.7.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Quick Reports plugin versions = 2.7.1. Solution No patched version available...

4.4AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•15 views

WordPress Woocommerce Blocker Lite plugin <= 2.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Blocker Lite plugin versions = 2.0.3. Solution Update the WordPress Woocommerce Blocker Lite plugin to the latest available version at least 2.1.0...

4.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•20 views

WordPress WP Mobile Menu plugin <= 2.8.2.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Mobile Menu plugin versions = 2.8.2.6. Solution Update the WordPress WP Mobile Menu plugin to the latest available version at least 2.8.2.7...

3.5AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•22 views

WordPress Ocean Extra plugin < 1.9.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ocean Extra plugin versions 1.9.4. Solution Update the WordPress Ocean Extra plugin to the latest available version at least 1.9.4...

4.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•18 views

WordPress Elementor Addon Elements plugin < 1.11.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Elementor Addon Elements plugin versions 1.11.14. Solution Update the WordPress Elementor Addon Elements plugin to the latest available version at least 1.11.14...

4.2AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•17 views

WordPress Redirection for Contact Form 7 plugin < 2.5.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Redirection for Contact Form 7 plugin versions 2.5.0. Solution Update the WordPress Redirection for Contact Form 7 plugin to the latest available version at least 2.5.0...

4.1AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•16 views

WordPress Tickera plugin < 3.4.9.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Tickera plugin versions 3.4.9.2. Solution Update the WordPress Tickera plugin to the latest available version at least 3.4.9.2...

4.4AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder