Lucene search
+L

11522 matches found

Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.15 views

PT-2023-31691 · WordPress · Wp Crowdfunding

Name of the Vulnerable Software and Affected Versions: WP Crowdfunding versions through 2.1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

6.5CVSS6.1AI score0.00277EPSS
SaveExploits0References5
Veracode
Veracode
added 2023/12/26 1:52 p.m.15 views

Denial Of Service

gitlab:sid is a vulnerable of Denial of Service. The vulnerability is due to Improper Input Validation and also affecting all versions of Gitlab EE and CE. It leads to denial of service by allow an attacker to cause pipelines to fail...

7.5CVSS7AI score0.00776EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/12/25 6:15 a.m.6 views

CVE-2023-31455

Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort...

7.5CVSS5.8AI score0.00615EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/25 6:15 a.m.4 views

CVE-2023-31289

Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort...

7.5CVSS7.2AI score0.00615EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/25 6:15 a.m.21 views

Input validation

Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort...

5CVSS7.3AI score0.00615EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/25 12:00 a.m.28 views

CVE-2023-31289

Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort...

7.8AI score0.00615EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/25 12:00 a.m.40 views

CVE-2023-31289

CVE-2023-31289 affects Pexip Infinity prior to version 31.2. The root cause is improper input validation for signalling, allowing remote attackers to trigger a service abort. Impact is a potential denial of service. Remediation per available sources is to upgrade to version 31.2 or later or apply...

7.5CVSS7.5AI score0.00615EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/22 6:15 p.m.9 views

CVE-2023-39251

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system...

6.7CVSS5.8AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/22 5:55 p.m.89 views

CVE-2023-39251

CVE-2023-39251 affects Dell BIOS and involves an Improper Input Validation that could allow a local, high-privilege attacker to corrupt system memory. Public descriptions consistently cite local access and memory corruption as impact. Several connectors (Dell DSA-2023-342, Nessus plugin) refer to...

6.7CVSS6.3AI score0.00167EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/22 12:00 a.m.17 views

PT-2023-26848 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability to corrupt memory on the syste...

6.7CVSS6.2AI score0.00167EPSS
SaveExploits0References5
OSV
OSV
added 2023/12/21 6:15 p.m.10 views

CVE-2023-50832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mondula GmbH Multi Step Form allows Stored XSS.This issue affects Multi Step Form: from n/a through 1.7.13...

4.8CVSS7.3AI score0.00402EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/21 6:15 p.m.24 views

CVE-2023-50831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This issue affects CURCY – Multi Currency for WooCommerce: from n/a through 2.2.0...

5.4CVSS7.3AI score0.00517EPSS
SaveExploits1References1
NVD
NVD
added 2023/12/21 3:15 p.m.22 views

CVE-2023-50822

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Currency.Wiki Currency Converter Widget – Exchange Rates allows Stored XSS.This issue affects Currency Converter Widget – Exchange Rates: from n/a through 3.0.2...

6.5CVSS0.00303EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/21 3:15 p.m.19 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Terrier Tenacity iframe Shortcode allows Stored XSS.This issue affects iframe Shortcode: from n/a through 2.0...

4.9CVSS6.9AI score0.00321EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/12/21 2:15 p.m.11 views

CVE-2023-6145

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 1212202...

9.8CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.8 views

PT-2023-30485 · Unknown · Event Monster – Event Management

Name of the Vulnerable Software and Affected Versions: Event Monster – Event Management, Tickets Booking, Upcoming Event versions n/a through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

5.9CVSS6AI score0.00325EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2023/12/21 12:00 a.m.38 views

Zoom Client < 5.16.5 Multiple Vulnerabilities (ZSB-23059, ZSB-23062, ZSB-24006, ZSB-24007, ZSB-24008) - Windows

The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

9.8CVSS6.3AI score0.01689EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.12 views

PT-2023-31655 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: Insert or Embed Articulate Content into WordPress versions through 4.3000000021 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. Thi...

6.5CVSS6AI score0.00309EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.11 views

WordPress plugin Colibri Page Builder cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS6AI score0.0037EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.16 views

PT-2023-31660 · Unknown · Aerin Loan Repayment Calculator/Application Form

Name of the Vulnerable Software and Affected Versions: Aerin Loan Repayment Calculator and Application Form versions n/a through 2.9.3 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means tha...

5.9CVSS5.9AI score0.00335EPSS
SaveExploits0References5
Rows per page
Query Builder