Lucene search
+L

1253 matches found

CVE
CVE
•added 2025/01/23 12:00 a.m.•102 views

CVE-2024-53379

A heap buffer overflow exists in the server-side handshake implementation of Real Time Logic LLC's SharkSSL (specifically version from 05/05/24, commit 64808a5e12c83b38f85c943dee0112e428dc2a43 ). A remote attacker can exploit this vulnerability by sending a malformed Client-Hello message to trigg...

7.5CVSS7.5AI score0.00486EPSS
SaveExploits0References1
Mend
Mend
•added 2025/01/23 12:00 a.m.•4 views

CVE-2024-53379

Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hello message...

8.7CVSS0.00486EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/13 3:15 p.m.•31 views

CVE-2024-54338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in christerf Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through = 1.0.2...

6.5CVSS0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:25 p.m.•11 views

CVE-2024-54338 WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christer Fernstrom Hello Event Widgets For Elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through 1.0.2...

6.5CVSS7AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:25 p.m.•61 views

CVE-2024-54338

CVE-2024-54338 affects Hello Event Widgets For Elementor (WordPress) and allows DOM-based XSS due to improper neutralization of user input during web page generation for Hello Event Widgets For Elementor

6.5CVSS7.2AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 4:15 a.m.•23 views

CVE-2024-12572

The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...

6.1CVSS0.00163EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/13 3:24 a.m.•56 views

CVE-2024-12572

CVE-2024-12572 affects the Hello In All Languages WordPress plugin (versions up to and including 1.0.6). The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation on a function, enabling unauthenticated attackers to update plugin settings and inject malicious sc...

6.1CVSS6AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•20 views

PT-2024-36222 · Christer Fernstrom · Hello Event Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: Hello Event Widgets For Elementor versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows DOM-Based XSS. This problem...

6.5CVSS6.8AI score0.00331EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•17 views

WordPress plugin Hello Event Widgets For Elementor 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.5CVSS7.9AI score0.00331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•8 views

CVE-2024-54338: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in christerf Hello Event Widgets For Elementor hello-event-widgets-for-elementor allows DOM-Based XSS.This issue affects Hello Event Widgets For Elementor: from n/a through = 1.0.2...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•8 views

CVE-2024-12572: Cross-Site Request Forgery (CSRF)

The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...

6.1CVSS5.5AI score0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•5 views

PT-2024-17660

Name of the Vulnerable Software and Affected Versions Hello In All Languages plugin for WordPress versions up to, and including, 1.0.6 Description The issue is due to missing or incorrect nonce validation on a function, allowing unauthenticated attackers to update settings and inject malicious we...

6.1CVSS0.00163EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/12/12 6:05 p.m.•11 views

WordPress Hello in All Languages plugin <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Rei Kobayashi in WordPress Plugin Hello In All Languages versions = 1.0.6...

6.1CVSS5.9AI score0.00163EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/12/11 9:42 p.m.•14 views

WordPress Hello Event Widgets For Elementor plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Hello Event Widgets For Elementor versions = 1.0.2...

6.5CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/09 5:24 a.m.•7 views

Malicious code in take4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/12/09 5:24 a.m.•13 views

MAL-2024-11465 Malicious code in take4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/08 10:31 p.m.•6 views

Malicious code in asdasssd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/08 10:31 p.m.•6 views

Malicious code in asdassd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/08 10:31 p.m.•6 views

Malicious code in asdasd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/12/08 10:31 p.m.•10 views

MAL-2024-11304 Malicious code in asdasd-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder