Lucene search
+L

8448 matches found

Cvelist
Cvelist
•added 2023/01/23 2:31 p.m.•41 views

CVE-2022-4753 Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

5.5AI score0.00471EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/01/23 2:31 p.m.•10 views

CVE-2022-4753 Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

5.5AI score0.00471EPSS
SaveExploits2References1
CVE
CVE
•added 2023/01/23 2:31 p.m.•83 views

CVE-2022-4753

CVE-2022-4753 affects the Print-O-Matic WordPress plugin prior to 2.1.8. The vulnerability arises because certain shortcode attributes are not validated/escaped before being output, enabling stored XSS where an attacker with as little as contributor privileges can inject payloads that impact high...

5.4CVSS5.3AI score0.00471EPSS
SaveExploits2References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/23 12:00 a.m.•19 views

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS7.5AI score0.00534EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/23 12:00 a.m.•24 views

PT-2023-15389 · WordPress · Print-O-Matic

Name of the Vulnerable Software and Affected Versions: Print-O-Matic WordPress plugin versions prior to 2.1.8 Description: The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins. This...

5.4CVSS5.3AI score0.00471EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/01/23 12:00 a.m.•16 views

WordPress plugin The Print-O-Matic 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/23 12:00 a.m.•7 views

CVE-2022-4753: Undefined Security Weakness

The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...

5.4CVSS5.9AI score0.00471EPSS
SaveExploits2References2
osv_debian
osv_debian
•added 2023/01/20 7:15 p.m.•6 views

DEBIAN-CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

6.5CVSS7.1AI score0.01486EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2023/01/20 7:15 p.m.•22 views

AZL-13115 CVE-2022-47015 affecting package mariadb for versions less than 10.6.9-3

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

6.5CVSS6.7AI score0.01486EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/01/20 7:15 p.m.•17 views

UBUNTU-CVE-2022-47015

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

6.5CVSS6.8AI score0.01486EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/01/20 12:00 a.m.•16 views

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.6AI score0.00466EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•39 views

Microsoft Print 3D WRL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•50 views

Microsoft Print 3D PLY File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•27 views

Microsoft Print 3D PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•35 views

Microsoft Print 3D PLY File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/01/18 12:00 a.m.•48 views

Microsoft Print 3D PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS7.6AI score0.00939EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•6 views

PT-2023-33737 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v6.0.15 Description: A potential security issue has been identified in the Linux Kernel, related to a call print fmt leak in tracing/user events. The actual impact and attack plausibility have not yet been...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•2 views

PT-2023-34356

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.10.162 Description The issue is related to an infinite loop in the tracing read pipe function when print trace line overflows. This problem was introduced in version v2.6.27 and is fixed in version...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•2 views

PT-2023-33999

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.27 through 5.15.86 Description The issue is related to an infinite loop in the tracing read pipe function when print trace line overflows. This problem was introduced in version v2.6.27 and is fixed in version v5.15.8...

5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/01/13 12:00 a.m.•18 views

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.0058EPSS
SaveExploits0References2
Rows per page
Query Builder