Lucene search
K

9289 matches found

CNNVD
CNNVD
added 2024/11/12 12:0 a.m.0 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7AI score0.04025EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.2 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7AI score0.04025EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.2 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7AI score0.04025EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.4 views

Microsoft SQL Server 代码问题漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used under Microsoft Windows. A code issue vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

7.8CVSS7.2AI score0.0041EPSS
Exploits0References3
OSV
OSV
added 2024/11/11 6:15 a.m.2 views

CVE-2024-52356

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webangon The Pack Elementor addons allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through 2.1.0...

5.4CVSS7.3AI score0.00143EPSS
Exploits0References1
NVD
NVD
added 2024/11/11 6:15 a.m.9 views

CVE-2024-52356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.0...

6.5CVSS0.00143EPSS
Exploits0References1
CVE
CVE
added 2024/11/11 6:10 a.m.45 views

CVE-2024-52356

CVE-2024-52356 is a stored Cross-Site Scripting (XSS) vulnerability affecting The Pack Elementor addons (Header Footer & WooCommerce Builder, Template Library) with affected versions up to 2.1.0. The issue arises from improper input neutralization during web page generation, enabling stored XSS p...

6.5CVSS7.2AI score0.00143EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 6:31 p.m.3 views

WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin The Pack Elementor addons versions = 2.1.0...

6.5CVSS6.1AI score0.00143EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.7 views

WordPress The Pack Elementor addons Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software The Pack Elementor addons Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52356 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3e3bdbff1a41 Credits João Pedro S Alcântara Kinor...

6.5CVSS6.5AI score0.00143EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.4 views

Vulnerability of the handle_imageUpload() function in the plugin for creating customizable content based on artificial intelligence (AI): The Complete AI Pack from the WordPress content management system allows attackers to execute arbitrary code.

Vulnerability of the handleimageUpload function in the plugin for creating customizable content based on artificial intelligence AI: The Complete AI Pack of the WordPress content management system is associated with unlimited uploading of dangerous types of files. Exploiting this vulnerability...

10CVSS5.9AI score0.35907EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/11/07 12:0 a.m.7 views

RHEL 7 : CloudForms 4.7.7 (RHSA-2019:1833)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1833 advisory. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments...

7.8CVSS6.5AI score0.00145EPSS
Exploits0References19
OSV
OSV
added 2024/11/05 12:15 p.m.1 views

CVE-2024-9867

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

5.4CVSS7.5AI score0.0031EPSS
Exploits0References2
OSV
OSV
added 2024/11/05 12:15 p.m.3 views

CVE-2024-9657

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' parameter in all versions up to, and including, 5.10.2 due to insufficient input sanitization and output...

5.4CVSS6AI score0.01319EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2024/11/05 11:32 a.m.18 views

CVE-2024-9657 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' parameter in all versions up to, and including, 5.10.2 due to insufficient input sanitization and output...

6.5CVSS5.9AI score0.01319EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2024/11/05 11:32 a.m.18 views

CVE-2024-9867 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

5.4CVSS7.4AI score0.0031EPSS
Exploits0References2
CVE
CVE
added 2024/11/05 11:32 a.m.45 views

CVE-2024-9867

CVE-2024-9867 affects the Element Pack Elementor Addons for WordPress (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows). It is a stored cross-site scripting vulnerability via the Open Map Widget’s marker_content parameter in all versions up to 5.10.2, caused by insufficien...

5.4CVSS5.2AI score0.0031EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/05 11:32 a.m.18 views

CVE-2024-9657 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip' parameter in all versions up to, and including, 5.10.2 due to insufficient input sanitization and output...

6.5CVSS0.01319EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/11/05 11:32 a.m.20 views

CVE-2024-9867 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

5.4CVSS0.0031EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/11/05 3:50 a.m.4 views

WordPress Element Pack Elementor Addons plugin <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Element Pack Elementor Addons versions = 5.10.2...

6.5CVSS5.8AI score0.01319EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/05 12:0 a.m.2 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS7.5AI score0.0031EPSS
Exploits0References2
Rows per page
Query Builder