Lucene search
K

40 matches found

NVD
NVD
added 2026/04/07 3:17 p.m.2 views

CVE-2026-5376

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS0.00212EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/07 2:11 p.m.17 views

CVE-2026-5376 runZero Platform session timeout failure

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS0.00212EPSS
Exploits0References2
CVE
CVE
added 2026/04/07 2:11 p.m.4 views

CVE-2026-5376

The CVE-2026-5376 issue affects the runZero Platform where session inactivity timeouts could fail to trigger due to automatic page reloading. Root cause is CWE-613 (Insufficient Control of Resources After Expiration or Release). CVSS v3.1 vector: AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N, base score 5....

5.9CVSS5.8AI score0.00212EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/07 2:11 p.m.2 views

CVE-2026-5376

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N...

5.9CVSS5.8AI score0.00212EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-1937

Malware in sbrugna...

6.4CVSS6.1AI score0.02734EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-2867

Malware in sbrugna...

6.5CVSS6.6AI score0.00821EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 2:39 a.m.6 views

CVE-2018-10798

A hang issue was discovered in Brave before 0.14.0 on, for example, Linux. The vulnerability is caused by mishandling of JavaScript code that triggers the reload of a page continuously with an interval of 1 second...

6.5CVSS7AI score0.00821EPSS
Exploits1References1
wpexploit
wpexploit
added 2024/05/28 12:0 a.m.152 views

Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed 1. Go to the plugin settings 2. In the "Additional CSS" field, enter the payload 3. Save...

5.9AI score0.00399EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2024/04/13 12:0 a.m.4 views

PT-2024-27520 · Unknown · Cym1102 Nginxwebui

Name of the Vulnerable Software and Affected Versions: cym1102 nginxWebUI versions up to 3.9.9 Description: A critical issue has been found in the function exec of the file /adminPage/conf/reload. The manipulation of the argument nginxExe leads to deserialization. The attack may be initiated...

9.8CVSS6.6AI score0.00815EPSS
Exploits1References11
NVD
NVD
added 2024/03/12 1:15 p.m.9 views

CVE-2024-2393

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.8AI score0.00693EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/03/12 1:0 p.m.9 views

CVE-2024-2393 SourceCodester CRUD without Page Reload add_user.php sql injection

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file adduser.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.4AI score0.00693EPSS
Exploits1References3
CVE
CVE
added 2024/03/12 1:0 p.m.51 views

CVE-2024-2393

SourceCodester CRUD without Page Reload 1.0 is affected by a SQL injection in add_user.php via the city parameter. This vulnerability is exploitable remotely and has had an exploit disclosed publicly. Affected functionality is described as unknown in the file add_user.php; no product/vendor versi...

9.8CVSS6.8AI score0.00693EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2024/02/03 4:16 p.m.2 views

CVE-2024-1215

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score
Exploits0References3
Prion
Prion
added 2024/02/03 4:16 p.m.21 views

Cross site scripting

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

4CVSS6.4AI score0.00566EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/02/03 4:16 p.m.10 views

CVE-2024-1215

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

6.1CVSS4.4AI score0.00566EPSS
Exploits1References3
CVE
CVE
added 2024/02/03 3:31 p.m.135 views

CVE-2024-1215

CVE-2024-1215 affects SourceCodester CRUD without Page Reload 1.0. The vulnerability resides in fetch_data.php where manipulating the username or city parameter triggers a cross-site scripting (XSS) issue. Exploitation can be performed remotely, and public PoCs/claims exist. The issue is tied to ...

6.1CVSS6AI score0.00566EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/02/03 3:31 p.m.14 views

CVE-2024-1215 SourceCodester CRUD without Page Reload fetch_data.php cross site scripting

A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file fetchdata.php. The manipulation of the argument username/city leads to cross site scripting. The attack may be launched...

4CVSS6.2AI score0.00566EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.1 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.7AI score0.00791EPSS
Exploits1References6Affected Software3
RedhatCVE
RedhatCVE
added 2019/10/09 9:31 a.m.20 views

CVE-2017-7787

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...

7.5CVSS1.9AI score0.02376EPSS
Exploits1References2
NVD
NVD
added 2019/04/26 5:29 p.m.19 views

CVE-2019-9807

When arbitrary text is sent over an FTP connection and a page reload is initiated, it is possible to create a modal alert message with this text as the content. This could potentially be used for social engineering attacks. This vulnerability affects Firefox 66...

4.3CVSS4.3AI score0.00791EPSS
Exploits1References2
Rows per page
Query Builder