Lucene search
+L

74 matches found

Cvelist
Cvelist
added 2024/11/19 4:30 p.m.32 views

CVE-2024-51936 WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eSparkBiz ESB Testimonials esb-testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through = 1.0.0...

6.5CVSS0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:00 a.m.13 views

PT-2024-35069 · Unknown · Web Testimonials

Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

6.5CVSS6.7AI score0.00241EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/11/08 5:31 p.m.14 views

WordPress ESB Testimonials plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin ESB Testimonials versions = 1.0.0...

6.5CVSS6.1AI score0.00241EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:00 a.m.16 views

WordPress ESB Testimonials Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software ESB Testimonials Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51936 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5578fdc416f3 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.9AI score0.00241EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/07/25 12:00 a.m.18 views

VulnCheck KEV: CVE-2021-40684

Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...

9.1CVSS7.3AI score0.01236EPSS
SaveIn wildExploits0References2
Openbugbounty
Openbugbounty
added 2024/02/13 3:05 a.m.18 views

esb-splp.layanan.go.id Cross Site Scripting vulnerability OBB-3851993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2023/02/06 9:15 p.m.19 views

CVE-2022-45589

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...

7.2CVSS7.4AI score0.00623EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/06 9:15 p.m.12 views

CVE-2022-45589

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...

7.2CVSS5.8AI score0.00623EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/06 9:15 p.m.22 views

Sql injection

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...

5.8CVSS7.3AI score0.00623EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/02/06 12:00 a.m.35 views

CVE-2022-45589

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in the provisioning service only. Users of the provisioning service should upgrade to either 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT or a later release and use ...

7.6AI score0.00623EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/06 12:00 a.m.14 views

Talend ESB SQL注入漏洞

Talend ESB is a reliable and scalable enterprise service bus ESB from Talend, Inc. that enables development teams to manage integration projects in a holistic manner, combining application and data management integration in complex heterogeneous computing environments. An SQL injection...

7.8CVSS7.3AI score0.00623EPSS
SaveExploits0References3
CVE
CVE
added 2023/02/06 12:00 a.m.62 views

CVE-2022-45589

CVE-2022-45589 affects Talend ESB Runtime. The provisioning service in Talend ESB Runtime versions prior to 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT is vulnerable to SQL Injection. Upgrade to 8.0.1-R2022-10-RT or 7.3.1-R2022-09-RT (or later releases) to mitigate. The vulnerability is tied to the p...

7.2CVSS7.3AI score0.00623EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/06 12:00 a.m.20 views

PT-2023-14713 · Talend · Talend Esb Runtime

Name of the Vulnerable Software and Affected Versions: Talend ESB Runtime versions prior to 8.0.1-R2022-10-RT Talend ESB Runtime versions prior to 7.3.1-R2022-09-RT Description: The issue concerns SQL Injection attacks in the provisioning service of the Talend ESB Runtime. Users of the provisioni...

7.8CVSS7.3AI score0.00623EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 3:28 p.m.16 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2021-20354)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, and WebSphere Enterprise Service Bus. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a securi...

7.8CVSS6.5AI score0.04097EPSS
SaveExploits0Affected Software8
NVD
NVD
added 2021/12/15 3:15 p.m.34 views

CVE-2021-43892

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...

7.4CVSS0.02855EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2021/12/15 3:15 p.m.7 views

CVE-2021-43892

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...

7.4CVSS7.1AI score0.02855EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2021/12/15 3:15 p.m.12 views

CVE-2021-43892

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...

7.4CVSS7.3AI score0.02855EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/15 3:15 p.m.30 views

Spoofing

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability...

4.3CVSS7.4AI score0.02855EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/12/15 2:15 p.m.21 views

CVE-2021-43892 Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

...

7.4CVSS7.5AI score0.02855EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/15 2:15 p.m.42 views

CVE-2021-43892 Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

...

7.4CVSS7.8AI score0.02855EPSS
SaveExploits0References1
Rows per page
Query Builder