Lucene search
+L

8950 matches found

CNNVD
CNNVD
added 2023/04/12 12:00 a.m.9 views

Jenkins Plugin Report Portal 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.00431EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/04/12 12:00 a.m.21 views

WordPress Easy Forms for Mailchimp Plugin < 6.8.7 is vulnerable to Cross Site Scripting (XSS)

Software Easy Forms for Mailchimp Type Plugin Vulnerable versions 6.8.7 Fixed in 6.8.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1325 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bd41da1d02a4 Credits Erwan LR...

5.4CVSS5.7AI score0.00529EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2023/04/11 3:15 a.m.9 views

CVE-2023-1903

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...

4.3CVSS5.9AI score0.00391EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/11 2:31 a.m.55 views

CVE-2023-1903

CVE-2023-1903 affects SAP HCM Fiori App My Forms (Fiori 2.0) version 605. The underlying issue is missing authorization checks for an authenticated user, which can expose restricted header data. Sources consistently describe the affected software and the root cause as a lack of proper access cont...

4.3CVSS4.6AI score0.00391EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/11 2:31 a.m.33 views

CVE-2023-1903 Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)

SAP HCM Fiori App My Forms Fiori 2.0 - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header data...

4.3CVSS5AI score0.00391EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/07 3:15 p.m.9 views

CVE-2023-28789

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/07 3:15 p.m.21 views

CVE-2023-28781

Unauth. Stored Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/07 3:15 p.m.21 views

CVE-2023-28789

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

7.1CVSS6.3AI score0.00382EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/07 3:15 p.m.9 views

CVE-2023-28781

Unauth. Stored Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

6.1CVSS6.8AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/07 3:15 p.m.24 views

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

5.8CVSS5.8AI score0.00382EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/04/07 3:15 p.m.21 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/04/07 2:12 p.m.61 views

CVE-2023-28789

CVE-2023-28789 affects the WordPress plugin Contact Forms by Cimatti (

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/07 2:08 p.m.26 views

CVE-2023-28781 WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin = 1.5.4 versions...

7.1CVSS6.1AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/07 2:08 p.m.57 views

CVE-2023-28781

CVE-2023-28781 corresponds to an unauthenticated stored XSS in WordPress Contact Forms by Cimatti (Cimatti Consulting) plugin, affected versions

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.17 views

WordPress plugin Contact Forms by Cimatti 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.13 views

WordPress plugin Contact Forms by Cimatti 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.9AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/04/07 12:00 a.m.27 views

WordPress Formidable Forms Plugin <= 6.1.2 is vulnerable to PHP Object Injection

Software Formidable Forms Type Plugin Vulnerable versions = 6.1.2 Fixed in 6.2 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-1405 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID e0f1ba3999f1 Credits Nguyen Huu Do Required privilege...

7.5CVSS7.2AI score0.00702EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2023/04/06 4:15 p.m.11 views

AZL-26028 CVE-2023-24536 affecting package msft-golang for versions less than 1.20.7-1

Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount ...

7.5CVSS6.6AI score0.01479EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 5:15 a.m.8 views

CVE-2023-23981

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in QuantumCloud Conversational Forms for ChatBot plugin = 1.1.6 versions...

4.8CVSS5.8AI score0.00392EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/06 5:15 a.m.20 views

CVE-2023-23981

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in QuantumCloud Conversational Forms for ChatBot plugin = 1.1.6 versions...

5.9CVSS5.4AI score0.00392EPSS
SaveExploits0References1
Rows per page
Query Builder