Lucene search
+L

11584 matches found

OSV
OSV
added 2022/06/20 8:23 p.m.16 views

MAL-2022-6715 Malicious code in typescript-dom-lib-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75be6711c73ad24a7b04bb490d8390cd6f717b03cc7fcf664e61ee0f52ffa48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:23 p.m.4 views

Malicious code in typescript-dom-lib-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75be6711c73ad24a7b04bb490d8390cd6f717b03cc7fcf664e61ee0f52ffa48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.10 views

MAL-2022-6903 Malicious code in vendor-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a0b5099ec6bd274fd7bf4c2d20f7862fa2c1352b283b43f8a1f63a79b0ce38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.9 views

Malicious code in vendor-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63a0b5099ec6bd274fd7bf4c2d20f7862fa2c1352b283b43f8a1f63a79b0ce38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:15 p.m.7 views

Malicious code in react-dom-is (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:15 p.m.13 views

MAL-2022-5641 Malicious code in react-dom-is (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a992e0b69df1d0c12f913e0477532f0900953868530bc27dc69063307359e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:13 p.m.8 views

MAL-2022-4438 Malicious code in lyte-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.4 views

Malicious code in lyte-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7431369925fe1450c5e92d750aef6efa49476ab665cc1c0d319c88dcf02d79e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.8 views

Malicious code in react-instantsearch-hooks-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.15 views

MAL-2022-5649 Malicious code in react-instantsearch-hooks-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436eaaea08d9bd23560c9330c0c30b94c80a292e8bf007cf128e9846c8068075 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2022/06/13 5:15 p.m.26 views

CVE-2022-29455

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

6.1CVSS0.23678EPSS
SaveExploits7References3
OSV
OSV
added 2022/06/13 5:15 p.m.9 views

CVE-2022-29455

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

6.1CVSS6.3AI score0.23678EPSS
SaveExploits7References3
Prion
Prion
added 2022/06/13 5:15 p.m.33 views

Cross site scripting

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

4.3CVSS5.9AI score0.23678EPSS
SaveExploits7References3Affected Software1
Cvelist
Cvelist
added 2022/06/13 4:09 p.m.46 views

CVE-2022-29455 WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...

4.7CVSS6.1AI score0.23678EPSS
SaveExploits7References3
Positive Technologies
Positive Technologies
added 2022/06/13 12:00 a.m.20 views

PT-2022-3505 · Elementor · Elementor Website Builder

Name of the Vulnerable Software and Affected Versions: Elementor Website Builder plugin versions prior to 3.5.6 Description: The issue is related to insufficient protection of the webpage structure, allowing a remote attacker to perform cross-site scripting. This is a DOM-based Reflected Cross-Si...

6.4CVSS6.2AI score0.23678EPSS
SaveExploits7References18
wpexploit
wpexploit
added 2022/06/13 12:00 a.m.1079 views

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue...

6.1CVSS1.2AI score0.23678EPSS
SaveExploits7References1
WPVulnDB
WPVulnDB
added 2022/06/13 12:00 a.m.55 views

Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting

The plugin does not sanitise and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue PoC...

6.1CVSS0.2AI score0.23678EPSS
SaveExploits7References1Affected Software1
CVE
CVE
added 2022/06/09 10:36 p.m.66 views

CVE-2017-20027

The CVE-2017-20027 issue affects HumHub up to version 1.0.1 and is described as a DOM-based cross-site scripting vulnerability stemming from lack of input/data filtering. The attack could be launched remotely and exploit details are publicly disclosed; upgrading to version 1.1.1 is listed as the ...

6.1CVSS5.2AI score0.00637EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/09 10:36 p.m.34 views

CVE-2017-20027 HumHub DOM cross site scriting

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting DOM. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

4.3CVSS6.1AI score0.00637EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/09 5:15 p.m.5 views

CVE-2022-2029

Cross-site Scripting XSS - DOM in GitHub repository kromitgmbh/titra prior to 0.77.0...

8.2CVSS6.8AI score0.00709EPSS
SaveExploits1References3
Rows per page
Query Builder