Lucene search
K

8 matches found

NVD
NVD
added 6 days ago9 views

CVE-2026-7430

The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19. This is due to insufficient output escaping of imported snippet content when rendering JavaScript variables in the post editor. Specifically, the jqueryUiDialog method...

4.4CVSS0.00039EPSS
Exploits0References8
OSV
OSV
added 2026/05/12 7:41 a.m.2 views

MAL-2026-3692 Malicious code in guan (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e04a9a658bc7616e72a5edf276dd049e5b697f2492c46929caf2e01fac95d84 The top-level src/guan/init.py unconditionally calls statisticsofguanpackage on every import guan. That function in src/guan/others.py opens a raw TC...

5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.2 views

WordPress plugin Weaver Xtreme Theme Support Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

7.2CVSS7.3AI score0.00276EPSS
Exploits2References2
OSV
OSV
added 2022/10/25 5:15 p.m.1 views

CVE-2022-3335

The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import intentionally or not a malicious file and a suitable gadget chain is present on the blog...

7.2CVSS5.8AI score0.00901EPSS
Exploits2References1
Huntr
Huntr
added 2022/08/16 9:36 a.m.24 views

Stored XSS in 'Table name' field via Database information function

Description When the administrator uses the Database information function, malicious code will be accidentally called and executed through two cases: 1. 1 An internal attacker local with access right to the database could insert malicious content into the table name field by creating a table in t...

4.3CVSS0.3AI score0.00209EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/11 12:0 a.m.3 views

Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A buffer overflow vulnerability exists in Interactive Graphical SCADA System IGSS Definition...

9.3CVSS6.2AI score0.00127EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/03/11 12:0 a.m.2 views

Schneider Electric Interactive Graphical SCADA System 缓冲区错误漏洞

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. A buffer overflow vulnerability exists in Interactive Graphical SCADA System IGSS Definition...

9.3CVSS6.5AI score0.007EPSS
Exploits0References6
Kitploit
Kitploit
added 2016/08/20 2:30 p.m.12 views

Manalyze - A static analyzer for PE executables

Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior. A static analyzer for PE files Manalyze was written in C++ for Windows and Linux and is released under the terms of the GPLv3 license . It is a robust parser for PE files with a flexible...

7.1AI score
Exploits0References3
Rows per page
Query Builder