Lucene search
+L

840 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:24 p.m.6 views

Malicious code in mailru-auth-gate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4931b2764b279ed60d329913f78b0aa1f1b8b9c9536131bd23cc5abdb3a88ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:24 p.m.10 views

MAL-2022-4458 Malicious code in mailru-auth-gate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4931b2764b279ed60d329913f78b0aa1f1b8b9c9536131bd23cc5abdb3a88ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:0 a.m.35 views

WordPress Age Gate plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress Age Gate plugin 2.1.70 and earlier versions are vulnerable to a cross-site scripting vulnerability...

6.1CVSS1.6AI score0.0078EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/15 2:15 p.m.3 views

CVE-2021-36901

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

6.1CVSS5.8AI score0.0078EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/15 2:15 p.m.28 views

CVE-2021-36901

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

6.1CVSS0.0078EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/06/15 1:9 p.m.31 views

CVE-2021-36901 WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

6.1CVSS5.9AI score0.0078EPSS
SaveExploits1References2
CVE
CVE
added 2022/06/15 1:9 p.m.103 views

CVE-2021-36901

CVE-2021-36901 affects WordPress Age Gate plugin ≤ 2.17.0. The flaw is an unauthenticated Stored XSS due to insufficient input/data validation/filtering in the plugin, enabling injection of JavaScript into client pages. Affected product/version: WordPress Age Gate plugin (≤ 2.17.0). Root cause: l...

6.1CVSS5.8AI score0.0078EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/15 1:9 p.m.9 views

CVE-2021-36901 WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability in Phil Baker's Age Gate plugin = 2.17.0 at WordPress...

6.1CVSS5.8AI score0.0078EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.6 views

WordPress plugin Age Gate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. WordPress Age Gate plugin 2.1.70 and earlier versions are vulnerable to a cross-site scripting vulnerability...

6.1CVSS5.6AI score0.0078EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/13 11:15 p.m.6 views

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

9.8CVSS6AI score0.02056EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/06/13 10:45 p.m.26 views

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

10AI score0.02056EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/13 10:45 p.m.74 views

CVE-2021-41662

CVE-2021-41662 affects South Gate Inn Online Reservation System v1.0. The vulnerability is an SQL injection that can be chained with a malicious PHP file upload caused by improper file handling in the editImg function, enabling remote code execution. Documented CVSSv3.1 impact is Critical (9.8) w...

9.8CVSS9.8AI score0.02056EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.8 views

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System v1.0, which stems from improper file handling in the editImg function and can be exploited by an attacker to...

9.8CVSS8.3AI score0.02056EPSS
SaveExploits1References2
WPVulnDB
WPVulnDB
added 2022/06/10 12:0 a.m.26 views

Age Gate < 2.17.1 - Unauthenticated Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks...

6.1CVSS4.2AI score0.0078EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2022/06/08 3:15 p.m.6 views

CVE-2021-36710

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

8.8CVSS5.8AI score0.00344EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/08 3:15 p.m.5 views

CVE-2021-36710

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

8.8CVSS7.1AI score0.00344EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/08 3:15 p.m.27 views

CVE-2021-36710

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

8.8CVSS0.00344EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/08 3:15 p.m.20 views

Design/Logic Flaw

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

7.2CVSS8.7AI score0.00344EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/08 2:43 p.m.71 views

CVE-2021-36710

CVE-2021-36710 affects ToaruOS 1.99.2, with incorrect kernel access control due to improper MMU management and a low GDT address that allows userland mapping. This enables writing a call gate to escalate to CPL 0, per multiple connected sources (Red Hat, NVD, PRION/PT-PT, CNNVD, etc.). No public ...

8.8CVSS8.6AI score0.00344EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/08 2:43 p.m.28 views

CVE-2021-36710

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

8.9AI score0.00344EPSS
SaveExploits1References1
Rows per page
Query Builder