Lucene search
+L

1405 matches found

Wiz blog
Wiz blog
•added 2023/01/11 6:55 p.m.•21 views

Wiz launches Australia cloud data center further demonstrating commitment to ANZ and multinational organizations

Wiz announces availability of new regional data center and adds support for Essential Eight controls...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/12/14 8:17 p.m.•11 views

project10.info Cross Site Scripting vulnerability OBB-3101238

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2022/12/12 6:15 p.m.•41 views

CVE-2022-3933

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

5.4CVSS0.00912EPSS
SaveExploits2References1
OSV
OSV
•added 2022/12/12 6:15 p.m.•21 views

CVE-2022-3933

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00912EPSS
SaveExploits2References1
Prion
Prion
•added 2022/12/12 6:15 p.m.•35 views

Cross site scripting

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

4.9CVSS5.3AI score0.00912EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2022/12/12 5:54 p.m.•108 views

CVE-2022-3933

The CVE-2022-3933 issue affects the WordPress Essential Real Estate plugin ≤ 3.9.6. The vulnerability is an authenticated cross-site scripting flaw caused by insufficient sanitization/escaping of parameters, enabling an attacker with a role as low as Admin to inject scripts into a victim’s browse...

5.4CVSS5.3AI score0.00912EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/12 5:54 p.m.•20 views

CVE-2022-3933 Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

5.6AI score0.00912EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2022/12/12 5:54 p.m.•45 views

CVE-2022-3933 Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

5.5AI score0.00912EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•20 views

PT-2022-7190 · WordPress · Essential Real Estate

Name of the Vulnerable Software and Affected Versions: Essential Real Estate WordPress plugin versions prior to 3.9.6 Description: The issue is related to the lack of sanitization and escaping of some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting...

5.5CVSS5.2AI score0.00912EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2022/12/12 12:00 a.m.•19 views

WordPress plugin Essential Real Estate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.4CVSS5.4AI score0.00912EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/12 12:00 a.m.•8 views

CVE-2022-3933: Undefined Security Weakness

The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00912EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
•added 2022/11/17 12:00 a.m.•26 views

Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting

The plugin does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks. PoC https://example.com/wp-admin/admin-ajax.php?action=erepropertygalleryfillterajaxgap=%22%3E%3Cscript%3Ealert%22xss%22;%3C/script%3E%3C!--...

5.4CVSS1.7AI score0.00912EPSS
SaveExploits2Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
•added 2022/10/13 12:00 a.m.•14 views

Prevent Ransomware Attacks on Critical Infrastructure

Cyberattacks against critical infrastructure can cause massive societal disruption and take an enormous financial toll. Discover how to protect six key OT domains to help prevent ransomware and other threats to essential operations...

1.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/09/30 12:17 a.m.•21 views

ventilateur-plafond.net Cross Site Scripting vulnerability OBB-2966102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/08/21 12:31 p.m.•23 views

jeremyreiss.fr Cross Site Scripting vulnerability OBB-2856889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/08/20 6:52 p.m.•22 views

harmoniedailleurs.fr Cross Site Scripting vulnerability OBB-2856209

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/08/16 12:00 a.m.•18 views

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

6.5CVSS5.5AI score0.0043EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/07/15 12:00 a.m.•23 views

The vulnerability of the SSH key import function in multifunctional measuring devices SICAM GridEdge Essential ARM (6MD7881-2AA30), SICAM GridEdge Essential Intel (6MD7881-2AA40), SICAM GridEdge Essential Intel (6MD7881-2AA40), and SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) allows a hacker to execute arbitrary code.

The vulnerability of the SSH key import function in SICAM GridEdge Essential ARM 6MD7881-2AA30, SICAM GridEdge Essential Intel 6MD7881-2AA40, SICAM GridEdge Essential Intel 6MD7881-2AA40, and SICAM GridEdge Essential with GDS Intel 6MD7881-2AA20 devices relates to the disclosure of information in...

6.5CVSS6.3AI score0.0044EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2022/07/12 12:00 a.m.•3 views

PT-2022-3602

Name of the Vulnerable Software and Affected Versions SICAM GridEdge Essential ARM versions prior to V2.7.3 SICAM GridEdge Essential Intel versions prior to V2.7.3 SICAM GridEdge Essential with GDS ARM versions prior to V2.7.3 SICAM GridEdge Essential with GDS Intel versions prior to V2.7.3...

6.5CVSS0.0044EPSS
SaveExploits0References6
Openbugbounty
Openbugbounty
•added 2022/06/27 5:43 p.m.•22 views

an-electrorecycling.de Cross Site Scripting vulnerability OBB-2688304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Rows per page
Query Builder