Lucene search
+L

8758 matches found

CNNVD
CNNVD
added 2024/10/29 12:00 a.m.8 views

WordPress plugin Kata Plus–Addons for Elementor–Widgets, Extensions and Templates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS5.8AI score0.00363EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/10/29 12:00 a.m.12 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0341-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0341-1 advisory. Chromium 130.0.6723.69 boo1232060 CVE-2024-10229: Inappropriate implementation in Extensions CVE-2024-10230: Type Confusion in V8 CVE-2024-10231:...

8.8CVSS7.9AI score0.00638EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.15 views

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

9.4CVSS7.3AI score0.00504EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.19 views

The vulnerability of Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

2.5CVSS5.5AI score0.00144EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/10/28 3:20 p.m.19 views

OPENSUSE-SU-2024:0341-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 130.0.6723.69 boo1232060 CVE-2024-10229: Inappropriate implementation in Extensions CVE-2024-10230: Type Confusion in V8 CVE-2024-10231: Type Confusion in V8...

8.8CVSS8.3AI score0.00638EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/26 12:00 a.m.16 views

WordPress plugin Extensions by HocWP Team 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.8AI score0.00559EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/10/25 5:50 p.m.11 views

WordPress Extensions by HocWP Team plugin <= 0.2.3.2 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Extensions by HocWP Team versions = 0.2.3.2...

9.8CVSS7AI score0.00559EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2024/10/25 12:00 a.m.30 views

Microsoft Web Media Extensions (Windows SMB Login)

SMB login-based detection of Microsoft Web Media Extensions. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/10/24 9:15 p.m.24 views

CVE-2024-47882

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an...

6.1CVSS0.00477EPSS
SaveExploits1References3
OSV
OSV
added 2024/10/24 9:15 p.m.17 views

UBUNTU-CVE-2024-47882

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an...

6.1CVSS5.7AI score0.00477EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2024/10/24 8:35 p.m.27 views

CVE-2024-47882

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an...

6.1CVSS5.2AI score0.00477EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2024/10/24 7:00 a.m.24 views

Chromium: CVE -2024-10229 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS6.5AI score0.00504EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2024/10/24 12:00 a.m.29 views

KLA74613 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Inappropriate implementation...

8.8CVSS8.7AI score0.00638EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/24 12:00 a.m.7 views

PT-2024-32872 · Unknown +3 · Openrefine +3

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.8.3 Description: The built-in error page in OpenRefine includes the exception message and exception traceback without escaping HTML tags, allowing injection into the page if an attacker can produce an error with...

9.8CVSS6.8AI score0.45473EPSS
SaveExploits8References44
Cvelist
Cvelist
added 2024/10/22 9:43 p.m.18 views

CVE-2024-10229

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

0.00504EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/10/22 9:43 p.m.56 views

CVE-2024-10229

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

8.1CVSS6.2AI score0.00504EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/10/22 9:43 p.m.10 views

CVE-2024-10229

Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. Chromium security severity: High...

5.7AI score0.00504EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/22 9:15 a.m.9 views

CVE-2024-9987

A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agentsmodulescsv functionality. This issue affects Pandora FMS: from 700 through 777.3...

8.8CVSS5.8AI score0.00419EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.8 views

Pandora FMS SQL注入漏洞

Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A security vulnerability exists in Pandora FMS that stems from a post-authentication SQL injection vulnerability in the filters...

8.8CVSS8AI score0.00419EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2024/10/22 12:00 a.m.69 views

KLA74224 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Inappropriate implementation vulnerability in Extensions can be exploited to cause denial of service. 2. Type confusi...

8.8CVSS8.7AI score0.00638EPSS
SaveExploits0References3
Rows per page
Query Builder