Lucene search
+L

7650 matches found

Packet Storm
Packet Storm
added 2023/08/31 12:00 a.m.414 views

Easy Address Book Web Server 1.6 Buffer Overflow / Cross Site Scripting

Exploit Title: Easy Address Book Web Server v1.6 - Multiple Vulnerabilities Discovery by: Rafael Pedrero Discovery Date: 2021-01-10 CVE: CVE-2023-4491, CVE-2023-4492, CVE-2023-4493 Vendor Homepage: http://www.efssoft.com/web-address-book-server.html Software Link : http://www.efssoft.com/eabws.ex...

7.1AI score0.00984EPSS
SaveExploits1
OSV
OSV
added 2023/08/30 1:15 p.m.8 views

CVE-2023-33929

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/30 1:15 p.m.24 views

CVE-2023-33929

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/30 1:15 p.m.23 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Joaquín Ruiz Easy Admin Menu plugin = 1.3 versions...

4.3CVSS4.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/30 12:52 p.m.100 views

CVE-2023-33929

CVE-2023-33929 : A stored Cross-Site Scripting (XSS) vulnerability exists in the WordPress plugin Easy Admin Menu by Joaquín Ruiz, affecting versions 1.3 or apply vendor-provided mitigation if available. If upgrading is not possible, monitor for updates from the plugin vendor and affected sites.

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/30 12:00 a.m.9 views

WordPress plugin easy-admin-menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/08/28 12:00 a.m.24 views

WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Easy Coming Soon Type Plugin Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25483 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d32749ab7ef6 Credits Rio Darmawan Required...

5.9CVSS5.7AI score0.00366EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/08/25 12:15 p.m.8 views

CVE-2023-32603

Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/25 12:15 p.m.19 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in RedNao Donations Made Easy – Smart Donations plugin = 4.0.12 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/08/25 11:19 a.m.53 views

CVE-2023-32603

CVE-2023-32603 is an unauthenticated reflected XSS in WordPress plugin Donations Made Easy – Smart Donations, affected versions and = 4.0.13+ or equivalent) or monitor for an official fix.

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.13 views

WordPress plugin Donations Made Easy – Smart Donations 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/24 8:15 p.m.7 views

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

4.6CVSS5.8AI score0.00451EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/08/24 8:15 p.m.5 views

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

4.6CVSS5.8AI score0.00451EPSS
SaveExploits1References2
Prion
Prion
added 2023/08/24 8:15 p.m.23 views

Design/Logic Flaw

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

2.1CVSS4.8AI score0.00451EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/08/24 12:00 a.m.45 views

CVE-2023-39801

CVE-2023-39801 concerns Renault Easy Link Multimedia System Software version 283C35519R, where a lack of exception handling in processing WMA files over USB plug-and-play can trigger a Denial of Service (DoS). Affected component: the Renault Easy Link multimedia software. The vulnerability arises...

4.6CVSS4.7AI score0.00451EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/24 12:00 a.m.8 views

PT-2023-27110 · Renault · Renault Easy Link Multimedia System

Name of the Vulnerable Software and Affected Versions: Renault Easy Link Multimedia System Software version 283C35519R Description: The issue is related to a lack of exception handling in the software, allowing attackers to cause a Denial of Service DoS by supplying crafted WMA files when...

4.6CVSS4.6AI score0.00451EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/08/24 12:00 a.m.8 views

Groupe Renault Easy Link 安全漏洞

Groupe Renault Easy Link is an in-vehicle infotainment system from Groupe Renault France for a smart connected experience in the Renault car range. A security vulnerability exists in Groupe Renault Easy Link version 283C35519R, which originates from a vulnerability that allows an attacker to supp...

4.6CVSS5.1AI score0.00451EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/08/24 12:00 a.m.43 views

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

5AI score0.00451EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/23 3:15 p.m.39 views

CVE-2023-32505

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

5.9CVSS5.4AI score0.00396EPSS
SaveExploits0References1
OSV
OSV
added 2023/08/23 3:15 p.m.6 views

CVE-2023-32505

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Arshid Easy Hide Login plugin = 1.0.7 versions...

4.8CVSS7.3AI score0.00396EPSS
SaveExploits0References1
Rows per page
Query Builder