Lucene search
+L

7659 matches found

Fedora
Fedora
added 2022/07/04 1:35 a.m.31 views

[SECURITY] Fedora 36 Update: golang-github-oklog-0.3.2-11.20190701gitca7cdf5.fc36

OK Log is a distributed and coordination-free log management system for big o l' clusters. It's an on-prem solution that's designed to be a sort of building block: easy to understand, easy to operate, and easy to extend...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4
NVD
NVD
added 2022/06/29 7:15 a.m.18 views

CVE-2017-20108

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

5.4CVSS0.00632EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/29 7:15 a.m.8 views

CVE-2017-20108

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

5.4CVSS4AI score0.00632EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/29 7:15 a.m.27 views

Cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

3.5CVSS5.2AI score0.00632EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/29 6:55 a.m.25 views

CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

3.5CVSS5.2AI score0.00632EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/06/29 6:55 a.m.41 views

CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

3.5CVSS6.4AI score0.00632EPSS
SaveExploits1References2
CVE
CVE
added 2022/06/29 6:55 a.m.54 views

CVE-2017-20108

CVE-2017-20108 affects Easy Table Plugin 1.6 for WordPress. The vulnerability exists in /wordpress/wp-admin/options-general.php where input manipulation (notably including the string ">) can trigger a cross-site scripting (XSS) vulnerability. Exploitation is possible remotely. Documents consis...

5.4CVSS4.4AI score0.00632EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/06/29 12:00 a.m.7 views

WordPress plugin Easy Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.4CVSS5.3AI score0.00632EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.26 views

Motorola Solutions ACE1000 数据伪造问题漏洞

The Motorola Solutions ACE1000 is a remote terminal unit from Motorola Solutions USA. A data forgery vulnerability exists in the Motorola Solutions ACE1000 version that originates from allowing custom applications to be installed via the STS software, the C Toolkit, or the ACE1000 Easy...

8.8CVSS8.6AI score0.00435EPSS
SaveExploits0References6
NVD
NVD
added 2022/06/27 9:15 a.m.27 views

CVE-2022-1964

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS0.00584EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/06/27 9:15 a.m.8 views

CVE-2022-1964

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.4CVSS6AI score0.00584EPSS
SaveExploits2References2
Prion
Prion
added 2022/06/27 9:15 a.m.23 views

Design/Logic Flaw

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

3.5CVSS5.2AI score0.00584EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/06/27 8:58 a.m.33 views

CVE-2022-1964 Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVG

The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

5.5AI score0.00584EPSS
SaveExploits2References1
CVE
CVE
added 2022/06/27 8:58 a.m.104 views

CVE-2022-1964

The CVE concerns the WordPress Easy SVG Support plugin prior to v3.3.0, where uploaded SVG files are not properly sanitised. This allows users with a role as low as Author to upload an SVG containing XSS payloads, enabling stored cross-site scripting via SVG uploads. Affected software: WordPress ...

5.4CVSS5.2AI score0.00584EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/06/27 12:00 a.m.37 views

WordPress plugin Easy SVG Support 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress Easy SVG Support plugin 3.3....

5.4CVSS5.1AI score0.00584EPSS
SaveExploits2References2
CNVD
CNVD
added 2022/06/22 12:00 a.m.36 views

WordPress Events Made Easy plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Events Made Easy plugin prior to 2.2.81 are vulnerable to SQL injection...

9.8CVSS2.6AI score0.37873EPSS
SaveExploits2References1
OSV
OSV
added 2022/06/20 8:14 p.m.8 views

MAL-2022-3181 Malicious code in free-primogems-2022-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad825bffa9b974b481dc0a5971736216fc7ef2de8901ad126bc37e8124c880c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/20 11:15 a.m.7 views

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS7.4AI score0.37873EPSS
SaveExploits2References2
OSV
OSV
added 2022/06/20 11:15 a.m.10 views

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS5.8AI score0.37873EPSS
SaveExploits2References1
NVD
NVD
added 2022/06/20 11:15 a.m.28 views

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS0.37873EPSS
SaveExploits2References1
Rows per page
Query Builder