Lucene search
+L

15048 matches found

wpexploit
wpexploit
•added 2021/10/19 12:00 a.m.•161 views

Easy Digital Downloads < 2.11.2.1 - Reflected Cross-Site Scripting

The plugin does not escape the start-date and end-date parameters in the payment history dashboard before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

4.8CVSS1.6AI score0.00932EPSS
SaveExploits2References3
WPVulnDB
WPVulnDB
•added 2021/10/19 12:00 a.m.•17 views

Easy Digital Downloads < 2.11.2.1 - Reflected Cross-Site Scripting

The plugin does not escape the start-date and end-date parameters in the payment history dashboard before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues PoC...

4.8CVSS0.9AI score0.00932EPSS
SaveExploits2References3Affected Software1
CNVD
CNVD
•added 2021/10/19 12:00 a.m.•35 views

Easytest Cross-Site Scripting Vulnerability

Easytest is an online learning quiz platform of China's Huaju Digital Technology Co. Easytest suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject JavaScript and perform stored XSS attacks...

3.5CVSS2AI score0.00586EPSS
SaveExploits0
CNVD
CNVD
•added 2021/10/19 12:00 a.m.•46 views

Easytest SQL Injection Vulnerability (CNVD-2021-83597)

Easytest is an online learning quiz platform of China's Hua Ju Digital Technology, Inc. Easytest is vulnerable to SQL injection, which can be exploited by attackers to inject SQL commands into the parameters of the learning history page after gaining user privileges to access all databases and ga...

6.5CVSS4.2AI score0.01123EPSS
SaveExploits0
CNVD
CNVD
•added 2021/10/19 12:00 a.m.•40 views

Easytest SQL Injection Vulnerability

Easytest is an online learning quiz platform of China's Hua Ju Digital Technology, Inc. Easytest is vulnerable to SQL injection, which can be exploited by attackers to inject SQL commands into the parameters of the elective course management page after gaining user privileges to gain all database...

6.5CVSS3.9AI score0.01123EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/10/18 12:00 a.m.•28 views

Debian: Security Advisory (DSA-4988-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00733EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/10/17 12:00 a.m.•37 views

Debian DSA-4988-1 : libreoffice - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4988 advisory. Two security issues have been discovered in LibreOffice's support for digital signatures in ODF documents, which could result in incorrect signature...

7.5CVSS7AI score0.00733EPSS
SaveExploits0References7
Debian
Debian
•added 2021/10/16 7:23 p.m.•72 views

[SECURITY] [DSA 4988-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4988-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 16, 2021 https://www.debian.org/security/faq -...

7.5CVSS7.2AI score0.00733EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/10/15 6:51 p.m.•12 views

digital-technology.pro Improper Access Control vulnerability OBB-2171183

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2021/10/15 12:10 p.m.•49 views

CVE-2021-42335 Huachu Digital Technology Co.,Ltd. Easytest - Stored XSS

Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack...

5.4CVSS5.6AI score0.00586EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/10/15 12:10 p.m.•42 views

CVE-2021-42333 Huachu Digital Technology Co.,Ltd. Easytest - SQL Injection-1

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions...

8.8CVSS9.4AI score0.01123EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/10/15 12:00 a.m.•36 views

The vulnerability of the Media Foundation Dolby Digital Atmos Decoders in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation Dolby Digital Atmos Decoders in the Windows operating system is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.02519EPSS
SaveExploits0References3
ThreatPost
ThreatPost
•added 2021/10/14 6:18 p.m.•72 views

Verizon’s Visible Wireless Carrier Confirms Credential-Stuffing Attack

On Wednesday, Verizon’s Visible – an all-digital, uber-cheap wireless carrier – confirmed what customers have been complaining about on Reddit and Twitter all week: They lost control of their accounts; had their passwords and shipping addresses changed; and some got stuck with bills for pricey ne...

7.3AI score
SaveExploits0References19
OSV
OSV
•added 2021/10/13 1:15 a.m.•11 views

CVE-2021-40462

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.02519EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/13 1:15 a.m.•27 views

CVE-2021-40462

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability...

7.8CVSS0.02519EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/10/13 1:15 a.m.•13 views

CVE-2021-40462

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.02519EPSS
SaveExploits0References2Affected Software11
Prion
Prion
•added 2021/10/13 1:15 a.m.•34 views

Remote code execution

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability...

6.8CVSS7.9AI score0.02519EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
•added 2021/10/13 12:27 a.m.•20 views

CVE-2021-40462 Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

...

7.8CVSS6.8AI score0.02519EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/10/13 12:27 a.m.•49 views

CVE-2021-40462 Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability

...

7.8CVSS8.3AI score0.02519EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/13 12:27 a.m.•160 views

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

7.8CVSS7.8AI score0.02519EPSS
SaveExploits0References1Affected Software7
Rows per page
Query Builder