Lucene search
+L

19626 matches found

Cvelist
Cvelist
•added 2024/12/16 2:31 p.m.•32 views

CVE-2024-55973 WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rnystrom TSB Occasion Editor tsb-occasion-editor allows SQL Injection.This issue affects TSB Occasion Editor: from n/a through = 1.2.1...

8.5CVSS0.00517EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/16 2:31 p.m.•51 views

CVE-2024-55973

CVE-2024-55973 is an SQL Injection vulnerability in the WordPress plugin "TSB Occasion Editor" (affected: TSB Occasion Editor: from n/a through 1.2.1). Root cause: improper neutralization of inputs used in SQL commands. Public references identify the issue as an authenticated SQL injection (Subsc...

8.5CVSS7.3AI score0.00517EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/16 2:31 p.m.•9 views

CVE-2024-55973 WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rnystrom TSB Occasion Editor tsb-occasion-editor allows SQL Injection.This issue affects TSB Occasion Editor: from n/a through = 1.2.1...

8.5CVSS8.9AI score0.00517EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•5 views

CVE-2024-54249: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jules Colle Advanced Options Editor allows Reflected XSS.This issue affects Advanced Options Editor: from n/a through 1.0...

7.1CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/16 12:00 a.m.•4 views

CVE-2024-55973: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in rnystrom TSB Occasion Editor tsb-occasion-editor allows SQL Injection.This issue affects TSB Occasion Editor: from n/a through = 1.2.1...

8.5CVSS5.8AI score0.00517EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/16 12:00 a.m.•5 views

PT-2024-36625

Name of the Vulnerable Software and Affected Versions TSB Occasion Editor versions 1.2.1 and earlier Description The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows attackers to inject SQL code, potentially...

8.5CVSS0.00517EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/12/16 12:00 a.m.•20 views

WordPress plugin Advanced Options Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/16 12:00 a.m.•15 views

WordPress plugin TSB Occasion Editor SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS9.2AI score0.00517EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/12/14 8:04 p.m.•11 views

WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin TSB Occasion Editor versions = 1.2.1...

8.5CVSS8.1AI score0.00517EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/12/13 3:15 p.m.•15 views

CVE-2024-54236

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:24 p.m.•12 views

CVE-2024-54236 WordPress Ni WooCommerce Bulk Product Editor plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS8.6AI score0.00436EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin Ni WooCommerce Bulk Product Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•6 views

CVE-2024-54236: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anzar Ahmed Ni WooCommerce Bulk Product Editor ni-woocommerce-product-editor allows Reflected XSS.This issue affects Ni WooCommerce Bulk Product Editor: from n/a through = 1.4.5...

7.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•2 views

PT-2024-36114

Name of the Vulnerable Software and Affected Versions: Ni WooCommerce Bulk Product Editor versions 1.4.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations...

7.1CVSS0.00436EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/12/13 12:00 a.m.•23 views

CBL Mariner 2.0 Security Update: vim (CVE-2024-43790)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43790 advisory. - Vim is an open source command line text editor. When performing a search and displaying the search-count messag...

5.5CVSS5.2AI score0.00307EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/12/12 4:13 a.m.•3 views

Malware in editor-devel

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Fedora
Fedora
•added 2024/12/12 2:30 a.m.•28 views

[SECURITY] Fedora 40 Update: radare2-5.9.8-4.fc40

The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...

8.6CVSS6.9AI score0.00792EPSS
SaveExploits0
OSV
OSV
•added 2024/12/12 2:04 a.m.•8 views

CVE-2024-49079

Input Method Editor IME Remote Code Execution Vulnerability...

7.8CVSS5.9AI score0.00988EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/12/12 12:00 a.m.•15 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-2944)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS4.9AI score0.00296EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/12/12 12:00 a.m.•23 views

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2024-2974)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5AI score0.00352EPSS
SaveExploits0References2
Rows per page
Query Builder