Lucene search
+L

1361 matches found

NVD
NVD
•added 2021/05/05 7:15 p.m.•30 views

CVE-2021-24255

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS0.0059EPSS
SaveExploits0References2
OSV
OSV
•added 2021/05/05 7:15 p.m.•16 views

CVE-2021-24255

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS5.8AI score0.0059EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/05/05 7:15 p.m.•14 views

CVE-2021-24255

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS5.8AI score0.0059EPSS
SaveExploits0References3
Prion
Prion
•added 2021/05/05 7:15 p.m.•34 views

Cross site scripting

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

3.5CVSS5.2AI score0.0059EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/05/05 6:28 p.m.•33 views

CVE-2021-24255 Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4AI score0.0059EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/05 12:00 a.m.•5 views

CVE-2021-24255: Improper Neutralization of Input During Web Page Generation

The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, both via a similar method...

5.4CVSS5.7AI score0.0059EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/05 12:00 a.m.•14 views

WordPress Essential Addons for Elementor Lite 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Essential Addons for Elementor Lite Plugin versions prior to 4.5.4. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

5.4CVSS5.3AI score0.0059EPSS
SaveExploits0References3
OSV
OSV
•added 2021/04/28 8:15 a.m.•12 views

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

8.8CVSS5.8AI score0.02843EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/28 8:15 a.m.•23 views

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

9CVSS0.02843EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/28 8:15 a.m.•27 views

Design/Logic Flaw

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

6.5CVSS8.1AI score0.02843EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/04/28 7:25 a.m.•54 views

CVE-2021-27648

Synology Antivirus Essential prior to 1.4.8-2801 is affected. The issue arises from an externally controlled reference to a resource in quarantine functionality, enabling remote authenticated users to obtain privileges via unspecified vectors. Affected component: quarantine logic handling externa...

9CVSS8AI score0.02843EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/28 7:25 a.m.•35 views

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

9CVSS8.7AI score0.02843EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/28 4:03 a.m.•7 views

CVE-2021-27648

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

9CVSS8.1AI score0.02843EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/28 12:00 a.m.•3 views

CVE-2021-27648: Externally Controlled Reference to a Resource in Another Sphere

Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors...

9CVSS5.8AI score0.02843EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/04/28 12:00 a.m.•16 views

Synology Antivirus Essential 安全漏洞

Synology Antivirus Essential is a software application from Synology China. A free and easy-to-use software package that protects your Synology NAS and files from viruses. A security vulnerability exists in Synology Antivirus Essential versions prior to 1.4.8-2801, where an external control...

9CVSS8AI score0.02843EPSS
SaveExploits0References2
HackRead
HackRead
•added 2021/02/04 10:31 p.m.•83 views

How to repair suspect database in SQL Server

By Waqas Programs work with databases, and if the database crashes essential information can be lost and this will be disastrous to the user. So what are your options? This is a post from HackRead.com Read the original post: How to repair suspect database in SQL Server...

0.9AI score
SaveExploits0
Fedora
Fedora
•added 2021/01/14 1:40 a.m.•122 views

[SECURITY] Fedora 33 Update: audacious-plugins-4.0.5-3.fc33

This package provides essential plugins for the Audacious audio player...

9.8CVSS3.5AI score0.02301EPSS
SaveExploits8
OpenVAS
OpenVAS
•added 2021/01/14 12:00 a.m.•42 views

Fedora: Security Advisory for audacious-plugins (FEDORA-2021-24ef21134b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.02094EPSS
SaveExploits7References2
CISA
CISA
•added 2020/12/03 12:00 a.m.•17 views

NCSC Releases 2020 Annual Review

The United Kingdom UK National Cyber Security Centre NCSC has released its Annual Review 2020, which focuses on its response to evolving and challenging cyber threats. Recognizing cybersecurity as a “team sport,” the publication includes highlights of NCSC’s collaboration with many partners,...

6.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/05 12:00 a.m.•3 views

CVE-2020-11697: Improper Neutralization of Input During Web Page Generation

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages community, essential, professional for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4...

6.1CVSS5.7AI score0.00685EPSS
SaveExploits0References2
Rows per page
Query Builder