Lucene search
+L

2768 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/12 12:00 a.m.•7 views

CVE-2022-4010: Undefined Security Weakness

The Image Hover Effects WordPress plugin before 5.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00538EPSS
SaveExploits2References2
Fedora
Fedora
•added 2022/12/03 2:03 a.m.•37 views

[SECURITY] Fedora 37 Update: sonic-visualiser-4.5-3.fc37

Sonic Visualiser is an application for viewing and analyzing the contents of music audio files. The aim of Sonic Visualiser is to be the first program you reach for when want to study a musical recording rather than simply listen to it. As well as a number of features designed to make exploring...

5.4CVSS5.4AI score0.00932EPSS
SaveExploits0
Fedora
Fedora
•added 2022/12/03 1:44 a.m.•31 views

[SECURITY] Fedora 36 Update: sonic-visualiser-4.5-2.fc36

Sonic Visualiser is an application for viewing and analyzing the contents of music audio files. The aim of Sonic Visualiser is to be the first program you reach for when want to study a musical recording rather than simply listen to it. As well as a number of features designed to make exploring...

5.4CVSS5.4AI score0.00932EPSS
SaveExploits0
OSV
OSV
•added 2022/11/28 2:15 p.m.•14 views

CVE-2022-3601

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00493EPSS
SaveExploits2References1
NVD
NVD
•added 2022/11/28 2:15 p.m.•28 views

CVE-2022-3601

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00493EPSS
SaveExploits2References1
Prion
Prion
•added 2022/11/28 2:15 p.m.•22 views

Cross site scripting

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.3CVSS4.7AI score0.00493EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/11/28 1:47 p.m.•6 views

CVE-2022-3601 Image Hover Effects Css3 <= 4.5 - Admin+ Stored XSS

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.7AI score0.00493EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/11/28 1:47 p.m.•45 views

CVE-2022-3601 Image Hover Effects Css3 <= 4.5 - Admin+ Stored XSS

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5AI score0.00493EPSS
SaveExploits2References1
CVE
CVE
•added 2022/11/28 1:47 p.m.•79 views

CVE-2022-3601

CVE-2022-3601 affects the WordPress plugin Image Hover Effects Css3 (versions

4.8CVSS4.7AI score0.00493EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
•added 2022/11/28 12:00 a.m.•17 views

WordPress plugin Image Hover Effects Css3 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

4.8CVSS4.9AI score0.00493EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/11/28 12:00 a.m.•15 views

PT-2022-23109 · WordPress · The Image Hover Effects Css3 Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Image Hover Effects Css3 WordPress plugin versions 4.5 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed,...

4.8CVSS5.8AI score0.00493EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/28 12:00 a.m.•6 views

CVE-2022-3601: Undefined Security Weakness

The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00493EPSS
SaveExploits2References2
Ubuntu
Ubuntu
•added 2022/11/24 8:11 a.m.•89 views

USN-5736-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14....

7.8CVSS6.6AI score0.0238EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2022/11/21 12:00 a.m.•57 views

Fedora: Security Advisory for js-jquery-ui (FEDORA-2022-7291b78111)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS6.6AI score0.0269EPSS
SaveExploits1References2
OSV
OSV
•added 2022/11/18 11:15 p.m.•17 views

CVE-2022-42459

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

7.2CVSS5.8AI score0.00885EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/18 11:15 p.m.•27 views

CVE-2022-42459

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

7.2CVSS0.00885EPSS
SaveExploits0References2
Prion
Prion
•added 2022/11/18 11:15 p.m.•28 views

Code injection

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

5.8CVSS6.9AI score0.00885EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/18 10:17 p.m.•47 views

CVE-2022-42459 WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability

Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin = 9.7.1 on WordPress...

7.2CVSS7.2AI score0.00885EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/18 10:17 p.m.•92 views

CVE-2022-42459

CVE-2022-42459 affects the WordPress Image Hover Effects Ultimate plugin (versions

7.2CVSS7AI score0.00885EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•24 views

PT-2022-26442 · WordPress · Image Hover Effects Ultimate

Name of the Vulnerable Software and Affected Versions: Image Hover Effects Ultimate plugin versions prior to 9.7.1 Description: The issue concerns an authentication WordPress options change vulnerability in the Image Hover Effects Ultimate plugin. Recommendations: For versions prior to 9.7.1,...

7.2CVSS7AI score0.00885EPSS
SaveExploits0References4
Rows per page
Query Builder