Lucene search
+L

5786 matches found

CNNVD
CNNVD
added 2024/12/09 12:00 a.m.11 views

WordPress plugin Lenxel Core for Lenxel(LNX) LMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8.1AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.6 views

WordPress plugin Wot Elementor Widgets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.8AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.13 views

WordPress plugin AIO Contact 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.6 views

WordPress plugin RRAddons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS7.7AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.10 views

WordPress plugin Unlock Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS7.7AI score0.00299EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.9 views

WordPress plugin FAT Services Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.8AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/07 1:19 p.m.10 views

CVE-2024-47115

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

7.8CVSS6AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/07 1:19 p.m.28 views

CVE-2024-47115

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

7.8CVSS0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/07 12:42 p.m.118 views

CVE-2024-47115

CVE-2024-47115 affects IBM AIX 7.2/7.3 and VIOS 3.1/4.1, due to improper neutralization of input in the invscout component that could allow a local user to execute arbitrary commands. The vulnerable fileset is invscout.rte (AIX) with versions 2.2.0.0–2.2.0.26. IBM’s advisory (invscout_intro) list...

7.8CVSS7.9AI score0.00231EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/12/07 12:42 p.m.14 views

CVE-2024-47115 IBM AIX command execution

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

7.8CVSS7.6AI score0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/07 12:42 p.m.35 views

CVE-2024-47115 IBM AIX command execution

IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...

7.8CVSS0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/06 2:15 p.m.25 views

CVE-2024-53820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Stored XSS.This issue affects Captivate Sync: from n/a through = 2.0.22...

6.5CVSS0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/06 2:15 p.m.16 views

CVE-2024-53797

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Stored XSS.This issue affects Beaver Builder: from n/a through = 2.8.4.3...

6.5CVSS0.00309EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/06 1:37 p.m.128 views

CVE-2024-11321

CVE-2024-11321 describes a reflected XSS in Hi e-learning’s Learning Management System (LMS) caused by improper input neutralization during web page generation. Affected: LMS versions prior to 06.12.2024. CVSSv3.1 base score 5.4 (Medium) with Network attack vector, Low impact on confidentiality a...

5.4CVSS5.8AI score0.00306EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.10 views

WordPress plugin Arkhe Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS7.7AI score0.00299EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/05 12:00 a.m.10 views

The vulnerability of the tmp_get_sites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers allows a hacker to execute arbitrary commands.

The vulnerability of the tmpgetsites function in TP-Link Archer Series, TP-Link Deco Series, and TP-Link Tapo Series routers lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8CVSS8.1AI score0.40679EPSS
SaveExploits1References4
NVD
NVD
added 2024/12/02 2:15 p.m.9 views

CVE-2024-52489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in udidol Add Chat App Button add-whatsapp-button allows Stored XSS.This issue affects Add Chat App Button: from n/a through = 2.1.5...

5.9CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 2:15 p.m.18 views

CVE-2024-52466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Explara Explara Events explara-events allows Reflected XSS.This issue affects Explara Events: from n/a through = 0.1.3...

7.1CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 1:49 p.m.9 views

CVE-2024-52454 WordPress GoQMieruca plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in goqsystem GoQMieruca goqmieruca allows Reflected XSS.This issue affects GoQMieruca: from n/a through = 1.0.3...

7.1CVSS7.2AI score0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 1:49 p.m.59 views

CVE-2024-52455

CVE-2024-52455 — WordPress plugin GoQSmile from GoQSystem Inc. suffers a Reflected XSS due to improper input handling. Affected versions include GoQSmile

7.1CVSS7.2AI score0.00339EPSS
SaveExploits0References1
Rows per page
Query Builder