Lucene search
+L

10943 matches found

Vulnrichment
Vulnrichment
added 2024/01/08 7:32 p.m.17 views

CVE-2023-52206 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

7.7CVSS7.5AI score0.00496EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 7:32 p.m.40 views

CVE-2023-52206 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer live-composer-page-builder.This issue affects Page Builder: Live Composer: from n/a through 1.5.25...

7.7CVSS7.8AI score0.00496EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/08 7:32 p.m.59 views

CVE-2023-52206

CVE-2023-52206 affects the WordPress plugin "Page Builder: Live Composer" (Live Composer Page Builder) up to version 1.5.25. The issue is described as deserialization of untrusted data leading to PHP object injection via deserialization. Patchstack and CVE records indicate the fix is available in...

7.7CVSS7.5AI score0.00496EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2024/01/08 4:28 a.m.13 views

balticlivecam.com Cross Site Scripting vulnerability OBB-3829658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.21 views

WordPress Plugin Page Builder: Live Composer Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.7CVSS6.6AI score0.00496EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/05 5:15 p.m.6 views

DEBIAN-CVE-2023-34327

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.7AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/05 5:15 p.m.40 views

CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.8AI score0.00256EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/05 5:15 p.m.2 views

DEBIAN-CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS5.7AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/05 5:15 p.m.9 views

UBUNTU-CVE-2023-34328

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS6AI score0.00256EPSS
SaveExploits0References3
OSV
OSV
added 2024/01/05 5:15 p.m.13 views

UBUNTU-CVE-2023-34327

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

5.5CVSS6.1AI score0.00256EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/01/03 12:00 a.m.17 views

WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.23 Fixed in 1.5.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52193 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 70cd66e65bfa Credits Ngô Thiên An ancorn from...

6.5CVSS6.5AI score0.0031EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2024/01/03 12:00 a.m.20 views

WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection

Software Page Builder: Live Composer Type Plugin Vulnerable versions = 1.5.25 Fixed in 1.5.29 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52206 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID cbdb1d60e22e Credits Le Ngoc Anh Required...

7.7CVSS6.8AI score0.00496EPSS
SaveExploits0References2Affected Software1
Kitploit
Kitploit
added 2024/01/01 11:30 a.m.63 views

Pantheon - Insecure Camera Parser

Pantheon is a GUI application that allows users to display information regarding network cameras in various countries as well as an integrated live-feed for non-protected cameras. Functionalities Pantheon allows users to execute an API crawler. There was original functionality without the use of...

7.2AI score
SaveExploits0References2
OSV
OSV
added 2023/12/29 1:15 p.m.12 views

CVE-2023-51422

Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings |...

8.8CVSS7.3AI score0.00621EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/12/29 12:59 p.m.46 views

CVE-2023-51422 WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings |...

9.9CVSS9.7AI score0.00621EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/29 11:15 a.m.25 views

CVE-2023-51361

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS,...

5.9CVSS0.00335EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 11:15 a.m.12 views

CVE-2023-51361

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS,...

4.8CVSS7.3AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/29 11:15 a.m.30 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS,...

4.3CVSS6.9AI score0.00335EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/29 11:15 a.m.31 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

4.3CVSS7AI score0.00328EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/29 10:58 a.m.39 views

CVE-2023-51371 WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating...

5.9CVSS5.9AI score0.00328EPSS
SaveExploits0References1
Rows per page
Query Builder