Lucene search
+L

7660 matches found

NVD
NVD
added 2022/11/17 11:15 p.m.32 views

CVE-2021-36905

Multiple Auth. contributor+ Stored Cross-Site Scripting XSS vulnerabilities in Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS0.00449EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/17 11:15 p.m.7 views

CVE-2021-36905

Multiple Auth. contributor+ Stored Cross-Site Scripting XSS vulnerabilities in Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS5.8AI score0.00449EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/17 11:15 p.m.18 views

Cross site scripting

Multiple Auth. contributor+ Stored Cross-Site Scripting XSS vulnerabilities in Quiz And Survey Master plugin = 7.3.4 on WordPress...

4.9CVSS5.4AI score0.00449EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/17 10:02 p.m.40 views

CVE-2021-36905 WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Auth. contributor+ Stored Cross-Site Scripting XSS vulnerabilities in Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS5.6AI score0.00449EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/17 10:02 p.m.62 views

CVE-2021-36905

The CVE-2021-36905 entry describes a stored XSS vulnerability in the WordPress Quiz And Survey Master plugin (versions

5.4CVSS5.4AI score0.00449EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/17 12:00 a.m.9 views

WordPress plugin Quiz And Survey Master 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin...

5.4CVSS5.4AI score0.00449EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/11/15 11:38 a.m.11 views

kernel: concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

6.3CVSS6.2AI score0.00281EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/11/15 9:45 a.m.19 views

dovecot: Privilege escalation when similar master and non-master passdbs are used

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

8.8CVSS7.3AI score0.02085EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/09 2:43 p.m.16 views

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management

Summary IBM InfoSphere Master Data Management is affected by IBM WebSphere Application Server which is vulnerable to SOAPAction spoofing when processing JAX-WS Web Services requests Vulnerability Details CVEID:CVE-2022-38712 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web...

5.9CVSS5.8AI score0.00492EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/09 2:27 p.m.22 views

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management

Summary IBM InfoSphere Master Data Management is affected by vulnerbility in IBM WebSphere Application Server to a server-side request forgery vulnerability. This has been addressed. Vulnerability Details CVEID:CVE-2022-35282 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is...

6.5CVSS5AI score0.00312EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/09 1:56 p.m.22 views

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management

Summary IBM InfoSphere Master Data Management is affected by IBM WebSphere Application Server vulnerability to cross-site scripting in the Admin Console. This has been addressed. Vulnerability Details CVEID:CVE-2022-34336 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is...

5.4CVSS5.4AI score0.00452EPSS
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
added 2022/11/09 7:56 a.m.11 views

master-sporta.ua Cross Site Scripting vulnerability OBB-3045031

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/11/08 10:08 a.m.12 views

dovecot: Privilege escalation when similar master and non-master passdbs are used

A vulnerability was found in the Dovecot IMAP Server. When two passdb configuration entries exist in the Dovecot configuration, which have the same driver and args settings, the incorrect usernamefilter and mechanism settings can be applied to passdb definitions. These incorrect settings can lead...

8.8CVSS7.3AI score0.02085EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2022/11/08 9:32 a.m.9 views

kernel: concurrency use-after-free between drm_setmaster_ioctl and drm_mode_getresources

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

6.3CVSS6.2AI score0.00281EPSS
SaveExploits0References4
OSV
OSV
added 2022/11/07 3:15 p.m.13 views

CVE-2022-43350

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deleteinquiry...

7.2CVSS5.8AI score0.0083EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/07 1:15 p.m.6 views

CVE-2022-42956

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password...

7.5CVSS5.8AI score0.00366EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/07 1:15 p.m.33 views

CVE-2022-42956

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password...

7.5CVSS0.00366EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/07 12:00 a.m.9 views

CVE-2022-42956

The PassWork extension 5.0.9 for Chrome and other browsers allows an attacker to obtain the cleartext master password...

7.5AI score0.00366EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/11/07 12:00 a.m.12 views

PassWork 安全漏洞

PassWork is a password manager from PassWork. A security vulnerability exists in PassWork version 5.0.9. An attacker exploited the vulnerability to obtain a plaintext master password...

7.5CVSS7.4AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/11/07 12:00 a.m.14 views

PT-2022-26680 · Passwork · Passwork

Name of the Vulnerable Software and Affected Versions: PassWork extension version 5.0.9 Description: The issue allows an attacker to obtain the cleartext master password. Recommendations: For PassWork extension version 5.0.9, update to a version that fixes this issue to prevent attackers from...

7.5CVSS7.4AI score0.00366EPSS
SaveExploits0References5
Rows per page
Query Builder