Lucene search
+L

5830 matches found

OSV
OSV
added 2024/01/08 8:15 p.m.10 views

CVE-2023-52213

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through...

6.1CVSS7.3AI score0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/08 7:26 p.m.5 views

CVE-2023-52213 WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through...

7.1CVSS6.7AI score0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/08 7:26 p.m.46 views

CVE-2023-52213 WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings allows Reflected XSS.This issue affects Rate Star Review – AJAX Reviews for Content, with Star Ratings: from n/a through...

7.1CVSS7.2AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/08 7:26 p.m.72 views

CVE-2023-52213

CVE-2023-52213 affects the Rate Star Review – AJAX Reviews for Content, with Star Ratings WordPress plugin. The issue is an improper neutralization of input in web page generation, leading to a reflected Cross-Site Scripting (XSS) vulnerability. Affected versions are 1.5.1 and earlier; the patch ...

7.1CVSS7.1AI score0.00323EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.12 views

WordPress Plugin Rate Star Review Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:00 a.m.16 views

PT-2024-14477 · Unknown · Videowhisper Rate Star Review

Name of the Vulnerable Software and Affected Versions: VideoWhisper Rate Star Review – AJAX Reviews for Content, with Star Ratings versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This...

7.1CVSS6.5AI score0.00323EPSS
SaveExploits0References5
OSV
OSV
added 2024/01/04 10:15 a.m.9 views

CVE-2022-2081

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is enabled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500 in a high rate, causing the targeted RTU500 CMU to...

7.5CVSS5.8AI score0.00636EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/01/03 12:00 a.m.23 views

WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Rate Star Review Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52213 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 73dc6c7e7398 Credits Kang SeoHee Required privilege...

7.1CVSS6.5AI score0.00323EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:00 a.m.27 views

GitLab 1.0 < 14.1.7 / 14.2 < 14.2.5 / 14.3 < 14.3.1 (CVE-2021-39899)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In all versions of GitLab CE/EE, an attacker with physical access to a user's machine may brute force the user's password via the change password function. There is a rate limit in place, but the atta...

4.2CVSS5.1AI score0.00257EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/27 8:15 p.m.31 views

CVE-2023-52075

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...

7.5CVSS0.00515EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/27 8:15 p.m.21 views

Code injection

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...

5CVSS7.1AI score0.00515EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/27 7:49 p.m.42 views

CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/27 7:49 p.m.15 views

CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...

7.5CVSS7.3AI score0.00515EPSS
SaveExploits0References3
CVE
CVE
added 2023/12/27 7:49 p.m.80 views

CVE-2023-52075

The ReVanced API project is affected. The vulnerability stems from the ReVanced API proxy not implementing error caching, which allows repeated request rate limiting to trigger under normal load. As described across sources, this lack of error caching leads to increased server load and results in...

7.5CVSS7.4AI score0.00515EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/27 12:00 a.m.15 views

WordPress Rate my Post – WP Rating System Plugin <= 3.4.2 is vulnerable to Broken Access Control

Software Rate my Post – WP Rating System Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2023-51667 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 327f1bb4bf15 Credits Brandon...

8.2CVSS6.9AI score0.00435EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/27 12:00 a.m.14 views

PT-2023-31911 · Unknown · Revanced Api

Name of the Vulnerable Software and Affected Versions: ReVanced API versions up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2 Description: The ReVanced API proxies requests to feed the ReVanced Manager and website with data. However, it lacks error caching, causing the rate lim...

7.5CVSS7.3AI score0.00515EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/27 12:00 a.m.11 views

ReVanced API Security Vulnerability

The ReVanced API is a simple API for proxying requests needed to provide data to ReVanced Manager and websites. A security vulnerability exists in ReVanced API 71f81f7f20cd26fd707335bca9838fa3e7df20d2 and prior versions, which stems from a lack of error caching, leading to the triggering of rate...

7.5CVSS6.7AI score0.00515EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/12/25 7:15 a.m.5 views

CVE-2023-37188

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfpratedecompress at zfp/blosc2-zfp.c...

7.5CVSS7.1AI score0.00834EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/12/25 12:00 a.m.11 views

Blosc C-Blosc2 Security Vulnerability

Blosc C-Blosc2 is a code library from the Blosc team that enables deep compression of binary data. The goal of the software is to reduce the size of large datasets on disk or in memory, speeding up memory-bound computations. The software supports BloscLZ, a compression program based on FastLZ, LZ...

7.5CVSS7AI score0.00834EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/25 12:00 a.m.12 views

PT-2023-25824 · C-Blosc2 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: C-blosc2 versions prior to 2.9.3 Description: The issue is related to a NULL pointer dereference in the function zfp rate decompress at zfp/blosc2-zfp.c. This indicates a problem where the code attempts to access memory through a null...

7.5CVSS8AI score0.00834EPSS
SaveExploits1References7
Rows per page
Query Builder