Lucene search
+L

8889 matches found

Vulnrichment
Vulnrichment
added 2024/11/18 3:29 p.m.14 views

CVE-2024-52426 WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linear Oy Linear linear allows DOM-Based XSS.This issue affects Linear: from n/a through = 2.8.0...

6.5CVSS8.6AI score0.00209EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2024/11/18 12:30 p.m.28 views

django CMS Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS.This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS6.4AI score0.00497EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2024/11/18 12:15 p.m.20 views

CVE-2024-11319

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django-cms allows Cross-Site Scripting XSS. This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3...

4.8CVSS0.00497EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/18 10:15 a.m.27 views

CVE-2024-42385

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

7CVSS0.0009EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.4 views

PT-2024-35187 · Unknown · Simplegmaps

Name of the Vulnerable Software and Affected Versions: SimpleGMaps versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For SimpleGMap...

6.5CVSS5.6AI score0.00231EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.7 views

WordPress plugin Themify Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.6 views

WordPress plugin Event Tickets with Ticket Scanner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

9.9CVSS8.2AI score0.00726EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.8 views

django CMS 安全漏洞

django CMS is django CMS open source an open source enterprise content management system based on the django framework. A security vulnerability exists in django CMS versions 3.11.7, 3.11.8, 4.1.2, and 4.1.3, which stems from improper input neutralization during web page generation and is...

4.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.5 views

WordPress plugin Provide Forex Signals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS7.6AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.4 views

Egebilgi Software Website Template SQL注入漏洞

Egebilgi Software Website Template is a series of website templates from Egebilgi Software. A SQL injection vulnerability exists in versions of Egebilgi Software Website Template prior to 29.04.2024, which stems from the use of incorrect special element neutralization, which can lead to SQL...

8.8CVSS7.9AI score0.00312EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.6 views

Cesanta Mongoose Web Server 安全漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14 that stems from improper delimiter neutralization, resulting in out-of-bounds memory writes...

7CVSS6.6AI score0.0009EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/18 12:0 a.m.16 views

Siemens SCALANCE M-800 Improper Output Neutralization For Logs (CVE-2024-5594)

control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.1CVSS7.7AI score0.00835EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.8 views

WordPress plugin WP Githuber MD 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

6.5CVSS7.7AI score0.00233EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.6 views

WordPress plugin OS Pricing Tables 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.2AI score0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.11 views

PT-2024-35262 · Terry Lin · Wp Githuber Md

Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations...

6.5CVSS8.7AI score0.00233EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.7 views

WordPress plugin Popup by Supsystic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.1CVSS8.3AI score0.01105EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.7 views

WordPress plugin Mage Front End Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.9 views

WordPress plugin WP Job Portal 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.7AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.7 views

Cesanta Mongoose Web Server 安全漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from an improper delimiter neutralization that causes an infinite loop error to be triggered...

7.5CVSS6.6AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.8 views

WordPress plugin Gameplan 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder