Lucene search
+L

18 matches found

OSV
OSV
added 3 days ago4 views

MINI-RPG2-W5CX-H3PX

Bulletin has no description...

7.5CVSS4.8AI score0.00483EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.9 views

PT-2025-52025

Name of the Vulnerable Software and Affected Versions AncoraThemes Exit Game versions through 1.4.3 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusio...

8.1CVSS6.4AI score0.00488EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.9 views

WordPress plugin Exit Game 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.6AI score0.00488EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-4374

Malware in sbrugna...

6.1CVSS6.1AI score0.01867EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 6:59 a.m.12 views

CVE-2024-11388

The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...

6.4CVSS5.6AI score0.0108EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/21 11:10 p.m.7 views

WordPress Dino Game plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Dino Game versions = 1.1.0...

6.4CVSS5.7AI score0.0108EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/11/21 11:15 a.m.6 views

CVE-2024-11388

The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dino-game' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attribute...

5.4CVSS7.4AI score0.0108EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/21 12:0 a.m.6 views

WordPress plugin Dino Game 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.5AI score0.0108EPSS
SaveExploits0References3
NVD
NVD
added 2022/09/09 3:15 p.m.26 views

CVE-2022-37335

Authenticated author+ Stored Cross-Site Scripting XSS vulnerability in WHA's Word Search Puzzles game plugin = 2.0.1 at WordPress...

4.8CVSS0.0047EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/19 12:0 a.m.21 views

Jenkins < 1.482, < 1.466.2 LTS Multiple Vulnerabilities - Linux

Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS6.7AI score0.02385EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/23 12:40 a.m.7 views

GHSA-3QXR-Q72Q-HMWP Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.1CVSS5.8AI score0.01867EPSS
SaveExploits0References6
Snyk
Snyk
added 2022/04/23 12:40 a.m.7 views

Cross-site Scripting (XSS)

Overview org.jvnet.hudson.plugins:ci-game is a Jenkins Continuous Integration Game plugin Affected versions of this package are vulnerable to Cross-site Scripting XSS. An attacker can inject arbitrary web script or HTML by sending a crafted request. Details Cross-site scripting or XSS is a code...

6.1CVSS5.2AI score0.01867EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/04/23 12:40 a.m.16 views

Jenkins CI Game Plugin allows Cross-Site Scripting (XSS)

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.1CVSS6.1AI score0.01867EPSS
SaveExploits0References6Affected Software1
Prion
Prion
added 2019/11/18 10:15 p.m.16 views

Cross site scripting

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

4.3CVSS6.1AI score0.01867EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/18 10:15 p.m.34 views

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.1CVSS6.5AI score0.01867EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/11/18 9:7 p.m.28 views

CVE-2012-4441

Cross-site Scripting XSS in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin...

6.4AI score0.01867EPSS
SaveExploits0References3
CVE
CVE
added 2019/11/18 9:7 p.m.120 views

CVE-2012-4441

CVE-2012-4441 : Jenkins Core prior to 1.482 and LTS prior to 1.466.2 are affected by a Cross‑Site Scripting (XSS) vulnerability in the CI Game plugin, allowing remote attackers to inject arbitrary scripts/HTML in the vulnerable UI. The issue stems from inadequate input validation in the plugin, l...

6.1CVSS6.8AI score0.01867EPSS
SaveExploits0References3Affected Software1
FreeBSD
FreeBSD
added 2012/09/17 12:0 a.m.14 views

jenkins -- multiple vulnerabilities

Jenkins Security Advisory reports: This advisory announces security vulnerabilities that were found in Jenkins core and several plugins. The first vulnerability in Jenkins core allows unprivileged users to insert data into Jenkins master, which can lead to remote code execution. For this...

1.2AI score
SaveExploits0References1
Rows per page
Query Builder