Lucene search
+L

20572 matches found

CNNVD
CNNVD
added 2024/02/06 12:00 a.m.9 views

SAMSUNG Mobile devices buffer error vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile devices SMR Feb-2024 Release 1 suffers from a buffer error vulnerability that stems from a security issue in the svc1tdvldelh component...

7.8CVSS6.6AI score0.00174EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/02/05 12:00 a.m.50 views

IBM Security Access Manager XML External Entity Injection Vulnerability

IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An XML external entity injection vulnerability exist...

7.1CVSS6.8AI score0.00963EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/02/05 12:00 a.m.17 views

PT-2024-14903 · Canon · Color Imageclass Lbp674C +9

Name of the Vulnerable Software and Affected Versions: Satera LBP670C Series versions v03.07 and earlier Satera MF750C Series versions v03.07 and earlier Color imageCLASS LBP674C versions v03.07 and earlier Color imageCLASS X LBP1333C versions v03.07 and earlier Color imageCLASS MF750C Series...

9.8CVSS9.9AI score0.01457EPSS
SaveExploits0References10
CNVD
CNVD
added 2024/02/05 12:00 a.m.67 views

IBM Security Access Manager Unauthorized Access Vulnerability

IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An unauthorized access vulnerability exists in IBM...

7.3CVSS6.7AI score0.00713EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/01 11:15 a.m.10 views

CVE-2023-51677

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP & AMP: from n/a through 1.23...

5.4CVSS7.3AI score0.00328EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/01 11:15 a.m.7 views

CVE-2023-51548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

4.8CVSS5.8AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/01 11:15 a.m.24 views

CVE-2023-51548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

5.9CVSS5.7AI score0.00336EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/01 11:15 a.m.22 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

4.3CVSS6.9AI score0.00336EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/01 10:14 a.m.37 views

CVE-2023-51548 WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Neil Gee SlickNav Mobile Menu allows Stored XSS.This issue affects SlickNav Mobile Menu: from n/a through 1.9.2...

5.9CVSS5.9AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/01 10:14 a.m.57 views

CVE-2023-51548

CVE-2023-51548 concerns the WordPress plugin SlickNav Mobile Menu. The vulnerability is an Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation, allowing injected scripts to be stored and executed in pages viewed by users. Affected versions are Slic...

5.9CVSS5.1AI score0.00336EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.10 views

PT-2024-14235 · Unknown · Magazine3 Schema & Structured Data For Wp & Amp

Name of the Vulnerable Software and Affected Versions: Magazine3 Schema & Structured Data for WP & AMP versions 1.23 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attack...

6.5CVSS5.9AI score0.00328EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.7 views

PT-2024-14198 · Unknown · Slicknav Mobile Menu

Name of the Vulnerable Software and Affected Versions: SlickNav Mobile Menu versions 1.9.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

5.9CVSS4.8AI score0.00336EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/02/01 12:00 a.m.6 views

WordPress plugin SlickNav Mobile Menu cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.2AI score0.00336EPSS
SaveExploits0References2
HackRead
HackRead
added 2024/01/29 8:41 p.m.26 views

Threat Actors Selling 1.8TB Database of Indian Mobile Users

By Deeba Ahmed Two groups of threat actors, namely CYBO CREW and UNIT8200, are apparently selling the same database with a price tag of $3,000. This is a post from HackRead.com Read the original post: Threat Actors Selling 1.8TB Database of Indian Mobile Users...

7.3AI score
SaveExploits0
Wallarm Lab
Wallarm Lab
added 2024/01/29 12:32 p.m.46 views

OWASP Mobile Top 10

Unraveling the Key Components of the Renowned OWASP Mobile Top 10 Index The altruistic initiative, Open Network Application Defense Plan ONADP, spearheads a cluster of operations in its mission to enhance the level of software protection. A cardinal tool emerging from their efforts, The OWASP...

7.7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/01/29 12:00 a.m.14 views

DeviceFarmer STF Security Vulnerability

STF is an open source web application from Device Farmer for remotely debugging smartphones, smartwatches and other gadgets from the comfort of your browser. A security vulnerability exists in DeviceFarmer STF version v3.6.6, which stems from the use of a corrupted or risky encryption algorithm...

9.1CVSS6.8AI score0.00376EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/01/29 12:00 a.m.85 views

Oracle Business Intelligence Enterprise Edition (OAS 7.0) (January 2024 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

7.7CVSS7AI score0.16195EPSS
SaveExploits4References11
Prion
Prion
added 2024/01/26 1:15 a.m.21 views

Spoofing

Microsoft Edge for Android Spoofing Vulnerability...

5CVSS7AI score0.00722EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:00 a.m.14 views

The vulnerability of the AppleMobileFileIntegrity component in the Safari browser and operating systems macOS, iOS, iPadOS, allows attackers to disclose protected information.

The vulnerability of AppleMobileFileIntegrity in the Safari browser and operating systems macOS, iOS, iPadOS is related to permission handling errors. Exploiting this vulnerability can allow attackers to disclose sensitive information...

5.5CVSS5.8AI score0.00199EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:00 a.m.9 views

The vulnerability of the ImageIO component in iOS, tvOS, macOS, watchOS, iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the iOS operating system, tvOS operating system, macOS operating system, watchOS operating system, and iPadOS operating system is related to reading data outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive informati...

7.8CVSS7AI score0.0052EPSS
SaveExploits0References5Affected Software5
Rows per page
Query Builder