CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2725 matches found

vulnersOsv•added 2022/06/24 12:00 a.m.•5 views

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2022-34174 via org.jenkins-ci.main:jenkins-core (1.581)

org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...

7.5CVSS0.01628EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-1746: Incorrect Privilege Assignment

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

7.6CVSS6.8AI score0.00296EPSS

SaveExploits0References3

osv_mal•added 2022/06/20 8:17 p.m.•21 views

MAL-2022-5407 Malicious code in poll-add-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc694fc37edc42eafa5a430d831b549c43843b033109b3b63e7c09548a786e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score

SaveExploits0References1

OSSF Malicious Packages•added 2022/06/20 8:17 p.m.•15 views

Malicious code in poll-add-in (npm)

6.9AI score

SaveExploits0References1

Github Security Blog•added 2022/06/20 8:17 p.m.•3 views

Malware in poll-add-in

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score

SaveExploits0References1Affected Software1

attackerkb•added 2022/06/02 2:15 p.m.•15 views

CVE-2022-1786

A use-after-free flaw was found in the Linux kernel’s iouring subsystem in the way a user sets up a ring with IORINGSETUPIOPOLL with more than one task completing submissions on this ring. This flaw allows a local user to crash or escalate their privileges on the system...

7.8CVSS6.7AI score0.01022EPSS

SaveExploits0References4

attackerkb•added 2022/05/30 9:15 a.m.•19 views

CVE-2022-1456

The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.00598EPSS

SaveExploits2References2

osv_cve•added 2022/05/30 9:15 a.m.•6 views

CVE-2022-1456

4.8CVSS5.8AI score0.00598EPSS

SaveExploits2References1

Prion•added 2022/05/30 9:15 a.m.•32 views

Cross site scripting

3.5CVSS4.8AI score0.00598EPSS

SaveExploits2References1Affected Software1

Cvelist•added 2022/05/30 8:35 a.m.•44 views

CVE-2022-1456 Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting

5.1AI score0.00598EPSS

SaveExploits2References1

Rapid7 Vulnerability Database (full)•added 2022/05/30 12:00 a.m.•14 views

CVE-2022-1456: Improper Neutralization of Input During Web Page Generation

4.8CVSS5.6AI score0.00598EPSS

SaveExploits2References2

Positive Technologies•added 2022/05/30 12:00 a.m.•10 views

PT-2022-13900

Name of the Vulnerable Software and Affected Versions Poll Maker WordPress plugin versions prior to 4.0.2 Description The issue allows high privilege users, such as admins, to perform Store Cross-Site Scripting attacks, even when unfiltered html is disallowed, due to the plugin's failure to...

4.8CVSS0.00598EPSS

SaveExploits2References5

CNNVD•added 2022/05/30 12:00 a.m.•29 views

WordPress plugin Poll Maker has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. Cross-site scripting vulnerabilities exist in versions of the WordPress Poll Maker plugin prior t...

4.8CVSS5.6AI score0.00598EPSS

SaveExploits2References2

vulnersOsv•added 2022/05/24 10:00 p.m.•4 views

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2019-10402 via org.jenkins-ci.main:jenkins-core (1.581)

5.4CVSS0.01033EPSS

SaveExploits0