Lucene search
+L

1776 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/15 12:00 a.m.•3 views

CVE-2023-22690: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Shopfiles Ltd Ebook Store plugin = 5.775 versions...

5.9CVSS5.8AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/05/12 12:00 a.m.•20 views

WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Easy Hide Login Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-31075 Patch priority Low CVSS severity Low 5.4 Developer WebFactory Ltd. PSID bee255c46b58 Credits konagash Required...

8.8CVSS6.7AI score0.00312EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/05/09 8:15 a.m.•24 views

CVE-2023-23863

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/09 8:15 a.m.•20 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/09 7:38 a.m.•13 views

CVE-2023-23863 WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/09 7:38 a.m.•34 views

CVE-2023-23863 WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2023/05/09 12:00 a.m.•21 views

WordPress Easy Hide Login Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Easy Hide Login Type Plugin Vulnerable versions = 1.0.7 Fixed in 1.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32505 Patch priority Low CVSS severity Low 5.9 Developer WebFactory Ltd. PSID 8942bd6e08ac Credits Rio Darmawan Required...

5.9CVSS5.8AI score0.00396EPSS
SaveExploits0References2Affected Software1
Talos
Talos
•added 2023/04/13 12:00 a.m.•46 views

Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability

Talos Vulnerability Report TALOS-2023-1692 Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability April 13, 2023 CVE Number CVE-2023-0896 SUMMARY A hard-coded password vulnerability exists in the SSH, telnet functionality of Lenovo Group Ltd. Smart Clock Essential 4.9.113. ...

8.8CVSS7.3AI score0.00405EPSS
SaveExploits0
NVD
NVD
•added 2023/04/04 3:15 p.m.•29 views

CVE-2023-27767

An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfonesetupfull3360.exe file...

7.8CVSS7.9AI score0.00433EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/04 3:15 p.m.•28 views

CVE-2023-27760

An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmorasetupfull846.exe...

7.8CVSS8AI score0.00433EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/04 3:15 p.m.•34 views

CVE-2023-27765

An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoveritsetupfull4134.exe file...

7.8CVSS7.9AI score0.00433EPSS
SaveExploits1References1
NVD
NVD
•added 2023/04/04 3:15 p.m.•31 views

CVE-2023-27771

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCCsetupfull10819.exe file...

7.8CVSS7.9AI score0.00433EPSS
SaveExploits1References1
Prion
Prion
•added 2023/04/04 3:15 p.m.•25 views

Design/Logic Flaw

An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmorasetupfull846.exe...

4.4CVSS7.9AI score0.00433EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/04/04 3:15 p.m.•36 views

Design/Logic Flaw

An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreatorsetupfull7743.exe file...

4.4CVSS7.9AI score0.00433EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/04/04 3:15 p.m.•26 views

Design/Logic Flaw

An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoveritsetupfull4134.exe file...

4.4CVSS7.9AI score0.00433EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/04/04 3:15 p.m.•30 views

Design/Logic Flaw

An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-maxsetupfull5371.exe file...

4.4CVSS7.9AI score0.00452EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•32 views

CVE-2023-27759

An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file...

7.9AI score0.00392EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•41 views

CVE-2023-27760

An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmorasetupfull846.exe...

8.1AI score0.00433EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•39 views

CVE-2023-27764

An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairitsetupfull5913.exe file...

8.1AI score0.00433EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/04/04 12:00 a.m.•30 views

CVE-2023-27770

An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-maxsetupfull5371.exe file...

8.1AI score0.00452EPSS
SaveExploits1References1
Rows per page
Query Builder