Lucene search
+L

1074 matches found

OpenVAS
OpenVAS
added 2022/01/18 12:00 a.m.31 views

WordPress Modern Events Calendar Lite Plugin < 6.2.0 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

5.4CVSS5.6AI score0.00611EPSS
SaveExploits2References1
NVD
NVD
added 2022/01/17 1:15 p.m.28 views

CVE-2021-25046

The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS...

5.4CVSS0.00611EPSS
SaveExploits2References1
OSV
OSV
added 2022/01/17 1:15 p.m.8 views

CVE-2021-25046

The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS...

5.4CVSS5.8AI score0.00611EPSS
SaveExploits2References1
Prion
Prion
added 2022/01/17 1:15 p.m.30 views

Cross site scripting

The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS...

3.5CVSS5.4AI score0.00611EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2022/01/17 1:00 p.m.56 views

CVE-2021-25046

CVE-2021-25046 affects the WordPress plugin Modern Events Calendar Lite prior to version 6.2.0. A vulnerability allows any logged-in user, including subscribers, to add a category with parameters that are not properly escaped in the admin panel, leading to stored cross-site scripting (XSS). The i...

5.4CVSS5.3AI score0.00611EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/01/17 1:00 p.m.40 views

CVE-2021-25046 Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS

The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS...

5.6AI score0.00611EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/01/17 12:00 a.m.13 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress Modern Events Calendar Lite plugin in versions prior to 6.2.0 suffers from a cross-site scripting...

5.4CVSS5.6AI score0.00611EPSS
SaveExploits2References2
OSV
OSV
added 2022/01/11 9:15 p.m.4 views

CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability...

7.8CVSS7.3AI score0.02544EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/11 9:15 p.m.23 views

CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability...

9.3CVSS0.02544EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/11 9:15 p.m.7 views

CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability...

9.3CVSS7.2AI score0.02544EPSS
SaveExploits0References3Affected Software10
Prion
Prion
added 2022/01/11 9:15 p.m.25 views

Remote code execution

Windows Modern Execution Server Remote Code Execution Vulnerability...

9.3CVSS8.8AI score0.02544EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/01/11 8:22 p.m.40 views

CVE-2022-21888 Windows Modern Execution Server Remote Code Execution Vulnerability

...

7.8CVSS8.8AI score0.02544EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/11 8:22 p.m.160 views

CVE-2022-21888

Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.

9.3CVSS8.8AI score0.02544EPSS
SaveExploits0References2Affected Software4
Microsoft KB
Microsoft KB
added 2022/01/11 8:00 a.m.80 views

Description of the security update for SharePoint Server Subscription Edition: January 11, 2022 (KB5002111)

None None...

9CVSS7.1AI score0.03101EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.7 views

PT-2022-1570 · Microsoft · Windows Modern Execution Server +1

Name of the Vulnerable Software and Affected Versions: Windows Modern Execution Server affected versions not specified Description: The issue is related to errors in code generation management in the Modern Execution Server component of Windows operating systems. It allows remote attackers to...

9.3CVSS9.7AI score0.02544EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2022/01/11 12:00 a.m.8 views

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for personal device use from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Modern Execution Server, which arises from a network system or product not properly filtering specific elements of externally input...

9.3CVSS8.1AI score0.02544EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/12/21 12:00 a.m.64 views

Keycloak Access Control Error Vulnerability (CNVD-2022-08727)

A security vulnerability exists in Red Hat Keycloak, a suite of software from Red Hat that provides authentication and management capabilities for modern applications and services. keycloak has a security flaw that stems from incorrect authorization of Keycloak allowing unprivileged users to crea...

8.8CVSS3.6AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/18 12:00 a.m.138 views

WordPress Modern Events Calendar Lite PluginSQL Injection Vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. Modern Events Calendar Lite Plugin is a WordPress open source application plugin. WordPress Modern Events Calendar Lite...

9.8CVSS3.4AI score0.728EPSS
SaveExploits7References1
CNVD
CNVD
added 2021/12/15 12:00 a.m.36 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-102799)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in the...

6.1CVSS6.2AI score0.00795EPSS
SaveExploits2References1
Microsoft KB
Microsoft KB
added 2021/12/14 8:00 a.m.45 views

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

None None...

8.8CVSS6.8AI score0.02662EPSS
SaveExploits0
Rows per page
Query Builder