CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17986 matches found

CNNVD•added 2024/03/14 12:00 a.m.•28 views

vantage6 Security Vulnerabilities

vantage6 is vantage6 open source an open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability exists in vantage6 versions 4.2.2 and earlier, which stems from the ability to find out which usernames exist by calling API routes that sen...

5.3CVSS5.9AI score0.00397EPSS

SaveExploits0References2

Wiz blog•added 2024/03/13 5:57 p.m.•30 views

NamespaceHound: protecting multi-tenant K8s clusters

NamespaceHound is an open-source tool for detecting the risk of potential namespace crossing violations and anonymous access opportunities in multi-tenant clusters...

7.3AI score

SaveExploits0

osv_cve•added 2024/03/13 4:15 p.m.•33 views

CVE-2024-2000

The Premium Addons PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'navigationdots' parameter of the Multi Scroll Widget in all versions up to, and including, 2.9.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS7.2AI score0.00423EPSS

SaveExploits0References2

NVD•added 2024/03/13 4:15 p.m.•33 views

CVE-2024-2000

6.4CVSS5.7AI score0.00423EPSS

SaveExploits0References2

NVD•added 2024/03/13 4:15 p.m.•42 views

CVE-2024-0898

The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This mak...

4.8CVSS4.3AI score0.00398EPSS

SaveExploits0References2

NVD•added 2024/03/13 4:15 p.m.•42 views

CVE-2024-0614

The Events Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.4.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permission...

4.8CVSS4.3AI score0.00679EPSS

SaveExploits1References3

NVD•added 2024/03/13 4:15 p.m.•37 views

CVE-2024-0449

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.8CVSS4.3AI score0.00525EPSS

SaveExploits0References3

Prion•added 2024/03/13 4:15 p.m.•47 views

Cross site scripting

3.2CVSS6AI score0.00525EPSS

SaveExploits0References2

Prion•added 2024/03/13 4:15 p.m.•43 views

Cross site scripting

5.5CVSS6AI score0.00423EPSS

SaveExploits0References2

Prion•added 2024/03/13 4:15 p.m.•39 views

Cross site scripting

3.2CVSS6AI score0.00398EPSS

SaveExploits0References2

CVE•added 2024/03/13 3:32 p.m.•82 views

CVE-2024-2000

CVE-2024-2000 affects the WordPress plugin Premium Addons PRO. The issue is stored XSS via the Multi Scroll Widget’s navigation_dots parameter due to insufficient input sanitization and output escaping, impacting all versions up to and including 2.9.12. authenticated users with contributor-level ...

6.4CVSS7.2AI score0.00423EPSS

SaveExploits0References2Affected Software1

Vulnrichment•added 2024/03/13 3:27 p.m.•27 views

CVE-2024-0898

4.4CVSS6.5AI score0.00398EPSS

SaveExploits0References2

Cvelist•added 2024/03/13 3:27 p.m.•51 views

CVE-2024-0898 Chat Bubble <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4CVSS4.5AI score0.00398EPSS

SaveExploits0References2

Vulnrichment•added 2024/03/13 3:26 p.m.•20 views

CVE-2024-0614 Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings

4.4CVSS6.4AI score0.00679EPSS

SaveExploits1References3

Cvelist•added 2024/03/13 3:26 p.m.•52 views

CVE-2024-0614 Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings

4.4CVSS4.5AI score0.00679EPSS

SaveExploits1References3

NVD•added 2024/03/13 2:15 a.m.•41 views

CVE-2023-4839

The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...

4.8CVSS4.3AI score0.00342EPSS

SaveExploits0References2

Prion•added 2024/03/13 2:15 a.m.•41 views

Cross site scripting

3.2CVSS6.1AI score0.00342EPSS

SaveExploits0References2

CVE•added 2024/03/13 1:57 a.m.•78 views

CVE-2023-4839

CVE-2023-4839 summary (WP Go Maps for WordPress) The WP Go Maps (WP Google Maps) plugin is affected by a Stored XSS in admin settings, present in versions up to and including 9.0.32. The vulnerability stems from insufficient input sanitization and output escaping, enabling an authenticated attack...

4.8CVSS6.5AI score0.00342EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2024/03/13 1:57 a.m.•49 views

CVE-2023-4839 WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting

4.4CVSS4.6AI score0.00342EPSS

SaveExploits0References2

Vulnrichment•added 2024/03/13 1:57 a.m.•22 views

CVE-2023-4839

4.4CVSS6.5AI score0.00342EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by