Lucene search
+L

1101 matches found

Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.18 views

PT-2024-23232 · Unknown · Locatoraid Store Locator

Name of the Vulnerable Software and Affected Versions: Locatoraid Store Locator versions through 3.9.30 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

5.9CVSS8.8AI score0.00359EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.13 views

Cisco IOS 和 IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...

8.6CVSS6.5AI score0.00803EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/27 12:00 a.m.8 views

WordPress Plugin Locatoraid Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.9CVSS7AI score0.00359EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/25 12:00 a.m.11 views

WordPress Locatoraid Store Locator Plugin <= 3.9.30 is vulnerable to Cross Site Scripting (XSS)

Software Locatoraid Store Locator Type Plugin Vulnerable versions = 3.9.30 Fixed in 3.9.31 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30181 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f59c57fd908e Credits Joshua Chan Required...

5.9CVSS6.9AI score0.00359EPSS
SaveExploits0References2Affected Software1
Spring Security Advisories
Spring Security Advisories
added 2024/03/19 12:00 a.m.47 views

This Week in Spring - March 19th, 2024

Hi, Spring fans! And happy Java 22 release day to those who celebrate! I just put out a huge blog detailing many of the exciting new features in Java 22. Check it out! As usual, we've got a packed roundup to get through this week so let's dive right into it! the Spring Authorization Server 1.3.0-...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/02/27 12:00 a.m.291 views

SuperStoreFinder 3.7 XSS / CSRF / Command Execution

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title SuperStoreFinder - Multiple Vulnerabilities .:. Google Dorks .:. "designed and built by Joe Iz." "Super Store Finder is designed and built by Joe Iz from Highwarden Huntsman." inurl:/superstorefinder/index.php ....

7.4AI score
SaveExploits0
OSV
OSV
added 2024/01/31 6:15 p.m.8 views

CVE-2024-22282

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1...

6.1CVSS7.3AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/31 6:15 p.m.19 views

CVE-2024-22282

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1...

7.1CVSS6.9AI score0.00331EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/31 6:15 p.m.23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1...

5.8CVSS7.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/31 5:54 p.m.2 views

CVE-2024-22282 WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1...

7.1CVSS7.1AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/31 5:54 p.m.56 views

CVE-2024-22282

CVE-2024-22282 affects the WordPress SimpleMap Store Locator plugin (

7.1CVSS7.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/31 5:54 p.m.30 views

CVE-2024-22282 WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Torbert SimpleMap Store Locator allows Reflected XSS.This issue affects SimpleMap Store Locator: from n/a through 2.6.1...

7.1CVSS7.2AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/31 12:00 a.m.7 views

WordPress plugin SimpleMap Store Locator cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/30 12:42 p.m.7 views

USN-6616-1 openldap vulnerability

It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS6.9AI score0.01947EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.11 views

PT-2024-14321 · Mathtex +1 · Mathtex +1

Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: An infinite loop issue in the software allows remote attackers to consume CPU resources via a crafted string in the application URL. This can lead to potential denial-of-service conditions...

7.5CVSS7.2AI score0.00856EPSS
SaveExploits1References13
WPVulnDB
WPVulnDB
added 2024/01/22 12:00 a.m.16 views

SimpleMap Store Locator <= 2.6.1 - Unauthenticated Stored Cross-Site Scripting

Description The SimpleMap Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/01/22 12:00 a.m.8 views

VulnCheck KEV: CVE-2021-24290

There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages...

6.1CVSS6.4AI score0.00826EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/18 12:00 a.m.8 views

PT-2024-15664 · Idmsistemas · Qsige

Name of the Vulnerable Software and Affected Versions: QSige affected versions not specified Description: The issue is related to the omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This allows an attacker to extract sensitive information fr...

7.5CVSS7.2AI score0.00492EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/01/16 12:00 a.m.18 views

WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)

Software SimpleMap Store Locator Type Plugin Vulnerable versions = 2.6.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22282 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2ef3007a7000 Credits Dimas Maulana Required...

7.1CVSS6.5AI score0.00331EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/01/03 12:00 a.m.50 views

Store Locator WordPress < 1.4.15 - Admin+ Arbitrary File Deletion

Description The plugin is vulnerable to Directory Traversal, allowing authenticated attackers, with administrator access and above, to delete arbitrary files...

6.8CVSS7AI score0.00617EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder