Lucene search
+L

1583 matches found

CNNVD
CNNVD
added 2024/04/16 12:0 a.m.8 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Complex Maintenanc...

6.1CVSS7.4AI score0.00382EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.7 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Complex Maintenanc...

6.1CVSS7.4AI score0.00373EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.18 views

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Complex Maintenanc...

6.1CVSS7.4AI score0.00346EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.12 views

Oracle Commerce 的 Oracle Commerce Platform 安全漏洞

Oracle Commerce is an e-commerce solution from Oracle Corporation. A security vulnerability exists in Oracle Commerce Platform for Oracle Commerce. An attacker could exploit the vulnerability to gain update, insert, or delete privileges to data...

4CVSS7.5AI score0.00347EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/15 3:2 p.m.6 views

WordPress Code Insert Manager (Q2W3 Inc Manager) plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Code Insert Manager Q2W3 Inc Manager versions = 2.5.3...

5.8CVSS6.2AI score0.00288EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.13 views

WordPress Code Insert Manager (Q2W3 Inc Manager) Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Code Insert Manager Q2W3 Inc Manager Type Plugin Vulnerable versions = 2.5.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32547 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID c408b8a3e4fc Credits Dimas Maulana...

5.8CVSS6.5AI score0.00288EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a memory leak vulnerability in perfenvinsertbtf...

5.5CVSS4.4AI score0.00232EPSS
SaveExploits0References6
OSV
OSV
added 2024/04/09 6:52 p.m.42 views

GHSA-747V-52C4-8VJ8 Contao: Unencoded insert tags in the frontend

Impact It is possible to inject insert tags via the form generator if the submitted form data is output on the page in a specific way. Patches Update to Contao 4.13.40 or 5.3.4. Workarounds Do not output the submitted form data on the website. References...

3.1CVSS4.4AI score0.00501EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2024/04/09 6:52 p.m.26 views

Contao: Unencoded insert tags in the frontend

Impact It is possible to inject insert tags via the form generator if the submitted form data is output on the page in a specific way. Patches Update to Contao 4.13.40 or 5.3.4. Workarounds Do not output the submitted form data on the website. References...

5.4CVSS6.8AI score0.00501EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/09 1:54 p.m.23 views

CVE-2024-28191 Contao may have unencoded insert tags in the frontend

Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a...

3.1CVSS6.9AI score0.00501EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/09 1:54 p.m.22 views

CVE-2024-28191 Contao may have unencoded insert tags in the frontend

Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a...

3.1CVSS5.3AI score
SaveExploits0References6
Cvelist
Cvelist
added 2024/04/09 1:54 p.m.29 views

CVE-2024-28191 Contao may have unencoded insert tags in the frontend

Contao is an open source content management system. Starting in version 4.0.0 and prior to version 4.13.40 and 5.3.4, it is possible to inject insert tags in frontend forms if the output is structured in a very specific way. Contao versions 4.13.40 and 5.3.4 have a patch for this issue. As a...

3.1CVSS4AI score0.00501EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.17 views

PT-2024-22325 · Contao · Contao

Name of the Vulnerable Software and Affected Versions: Contao versions 4.0.0 through 4.13.39 Contao versions 5.0.0 through 5.3.3 Description: The issue allows inject tags in frontend forms if the output is structured in a very specific way. It is possible to inject insert tags via the form...

5.4CVSS7AI score0.00501EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2024/04/08 1:0 p.m.11 views

CVE-2014-125111 namithjawahar Wp-Insert cross site scripting

A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.9 is able to address this issue. The...

4CVSS6.5AI score0.0042EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/04/08 1:0 p.m.32 views

CVE-2014-125111 namithjawahar Wp-Insert cross site scripting

A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.9 is able to address this issue. The...

4CVSS3.7AI score0.0042EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/08 12:0 a.m.11 views

Wp-Insert 跨站脚本漏洞

Wp-Insert is an ad management plugin. A cross-site scripting vulnerability exists in Wp-Insert version 2.0.8, which stems from the presence of unknown functions that lead to cross-site scripting...

4CVSS4.3AI score0.0042EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/08 12:0 a.m.8 views

PT-2024-10553 · Wp-Insert · Wp-Insert

Name of the Vulnerable Software and Affected Versions: namithjawahar Wp-Insert versions 2.0.8 and earlier Description: A vulnerability was found in the software, classified as problematic, and it affects some unknown functionality. The manipulation of this issue leads to cross-site scripting. The...

4CVSS6.8AI score0.0042EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2024/04/02 12:0 a.m.9 views

April 2, 2024, update for PowerPoint 2016 (KB5002568)

None None...

6.1AI score
SaveExploits0
Debian CVE
Debian CVE
added 2024/03/26 3:17 p.m.38 views

CVE-2024-26645

In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracingmap Running the following two commands in parallel on a multi-processor AArch64 machine can sporadically produce an unexpected warning about duplicate histogram...

5.5CVSS7.1AI score0.00242EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/03/18 10:7 a.m.48 views

CVE-2023-52609 binder: fix race between mmput() and do_exit()

In the Linux kernel, the following vulnerability has been resolved: binder: fix race between mmput and doexit Task A calls binderupdatepagerange to allocate and insert pages on a remote address space from Task B. For this, Task A pins the remote mm via mmgetnotzero first. This can race with Task ...

7.6AI score0.00185EPSS
SaveExploits0References8
Rows per page
Query Builder