Lucene search
+L

70 matches found

CVE
CVE
added 2023/11/16 7:17 p.m.58 views

CVE-2023-28621

CVE-2023-28621 is an XSS (Reflected) vulnerability in WordPress themes Raise Mag (<= 1.0.7) and Wishful Blog (

7.1CVSS7.1AI score0.00413EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2023/11/16 12:0 a.m.6 views

WordPress Plugin raise-mag Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS6.4AI score0.00413EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/09/05 12:0 a.m.14 views

WordPress Raise Mag Theme <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Raise Mag Type Theme Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28621 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ef6477e9116b Credits László Radnai Required...

7.1CVSS5.9AI score0.00413EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/07/10 4:15 p.m.9 views

CVE-2021-42079

An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests. POC Step 1: Prepare the SSRF with a request like this: GET...

4.9CVSS5.9AI score0.00694EPSS
SaveExploits0References5
OSV
OSV
added 2023/05/12 2:15 p.m.3 views

UBUNTU-CVE-2023-31919

Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the jcontextraiseexception at jerry-core/jcontext/jcontext.c...

5.5CVSS5.8AI score0.00332EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/05/12 12:0 a.m.6 views

PT-2023-23519 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: An Assertion Failure was discovered in Jerryscript via the jcontext raise exception at jerry-core/jcontext/jcontext.c. Recommendations: For Jerryscript version 3.0 commit 05dbbd1, consider...

5.5CVSS5.2AI score0.00332EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.7 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript jcontextraiseexception function, which can be exploited by an attacker to cause a denial of service...

5.5CVSS6.6AI score0.00332EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2023/01/10 6:30 a.m.20 views

Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS8.1AI score0.01279EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/01/10 6:30 a.m.16 views

GHSA-4R2F-6FM9-2QGH Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS8.1AI score0.01279EPSS
SaveExploits1References6
NVD
NVD
added 2023/01/10 6:15 a.m.13 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS9.4AI score0.01279EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/10 6:15 a.m.13 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS9.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/01/10 12:0 a.m.3 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.4AI score0.01279EPSS
SaveExploits1References4
CVE
CVE
added 2023/01/10 12:0 a.m.47 views

CVE-2017-20166

CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...

9.8CVSS9.3AI score0.01279EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/01/10 12:0 a.m.17 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.5AI score0.01279EPSS
SaveExploits1References4
Schneier on Security
Schneier on Security
added 2022/12/19 12:9 p.m.10 views

How to Surrender to a Drone

The Ukrainian army has released an instructional video explaining how Russian soldiers should surrender to a drone: "Seeing the drone in the field of view, make eye contact with it," the video instructs. Soldiers should then raise their arms and signal theyre ready to follow. After that the drone...

2.9AI score
SaveExploits0
OSV
OSV
added 2022/06/03 9:51 a.m.13 views

SUSE-SU-2022:1933-1 Security update for hdf5, suse-hpc

This update for hdf5, suse-hpc fixes the following issues: Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. - CVE-2020-10810: Fixed NULL pointer dereference in the function H5ACunpinentry located in H5AC....

9.8CVSS6.8AI score0.02948EPSS
SaveExploits21References72
OpenVAS
OpenVAS
added 2022/06/02 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2022:1912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.5AI score0.02948EPSS
SaveExploits12References2
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.3 views

PT-2022-8026 · Ecto · Ecto

Name of the Vulnerable Software and Affected Versions: Ecto version 2.2.0 Description: The issue is related to a lack of protection mechanism in the interaction between is nil and raise functions. Specifically, Ecto will not raise on queries with non-explicit nil comparisons, unless they are...

9.8CVSS7.1AI score0.01279EPSS
SaveExploits1References12
Patchstack
Patchstack
added 2022/02/28 12:0 a.m.11 views

WordPress Raise Prices with Sales for WooCommerce plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Raise Prices with Sales for WooCommerce plugin versions = 1.3.0. Solution Update the WordPress Raise Prices with Sales for WooCommerce plugin to the latest available version at least 1.3.1...

2.4AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.6 views

The vulnerability of the __GI_raise function (sig=sig@entry=6) in the qli utility from the firebird2.5-classic-common package allows a attacker to cause a service failure.

Vulnerability of the GIraise function sig=sig@entry=6 ../nptl/sysdeps/unix/sysv/linux/raise.c:64 is related to errors during pointer assignment for zero pointers 0x00007ffff6515875. Exploitation of this vulnerability may allow an attacker to cause a service failure through a specially crafted...

6.2CVSS5.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder