Lucene search
+L

133 matches found

Cvelist
Cvelist
added 2026/02/20 3:47 p.m.31 views

CVE-2026-24948 WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/20 3:47 p.m.44 views

CVE-2026-24948

CVE-2026-24948 is a reflected XSS vulnerability in the WordPress plugin Reflector (fox-themes Reflector reflector-plugins) affecting versions up to and including 1.2.2. The issue arises from improper input neutralization during web page generation, enabling Reflected XSS. Public sources in connec...

7.1CVSS5.5AI score0.00151EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/20 3:47 p.m.9 views

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS5.4AI score0.00151EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/20 3:47 p.m.7 views

CVE-2026-24948 WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS5.4AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.18 views

WordPress plugin Reflector 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.7AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.17 views

PT-2026-21232

Name of the Vulnerable Software and Affected Versions fox-themes Reflector versions through 1.2.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue impacts the Reflector...

7.1CVSS5.3AI score0.00151EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/03 10:09 a.m.11 views

WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Reflector versions = 1.2.2...

7.1CVSS5.3AI score0.00151EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.6 views

MiracleLinux 3 : quagga-0.98.6-5.2.0.1.AXS3 (AXSA:2010-471:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-471:02 advisory. Quagga is a free software that manages TCP/IP based routing protocol. It takes multi-server and multi- thread approach to resolve the current...

6.5CVSS6.5AI score0.04041EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.2 views

CVE-2022-50923 Cobian Backup 0.9 - Unquoted Service Path

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...

8.5CVSS7.2AI score0.00202EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/01/13 10:51 p.m.29 views

CVE-2022-50923 Cobian Backup 0.9 - Unquoted Service Path

Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...

8.5CVSS0.00202EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/13 10:51 p.m.17 views

CVE-2022-50923

Summary of CVE-2022-50923 (Cobian Backup 0.9) : An unquoted service path in the CobianReflectorService creates a local privilege escalation risk, allowing a local user to execute arbitrary code with LocalSystem privileges during service startup. This is defined by the unquoted binary path and is ...

8.5CVSS7.2AI score0.00202EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.6 views

Cobian Backup 代码问题漏洞

Cobian Backup is a file backup software by Luis Cobian Personal Developer. A code issue vulnerability exists in Cobian Backup version 0.9, which stems from the presence of an unquoted service path to the CobianReflectorService, which could lead to the execution of arbitrary code by a local user...

8.5CVSS6.2AI score0.00202EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.10 views

PT-2026-2399

Name of the Vulnerable Software and Affected Versions Cobian Backup version 0.9 Description A local user can execute arbitrary code with elevated system privileges. This is due to an unquoted service path in the CobianReflectorService, allowing attackers to inject malicious code that executes wit...

8.5CVSS7.5AI score0.00202EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/12/23 12:30 a.m.7 views

EUVD-2022-55751

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...

6.9CVSS6.5AI score0.00206EPSS
SaveExploits1References4
OSV
OSV
added 2025/12/22 10:15 p.m.8 views

CVE-2022-50689

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...

5.5CVSS6AI score0.00206EPSS
SaveExploits1References3
NVD
NVD
added 2025/12/22 10:15 p.m.7 views

CVE-2022-50689

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...

6.9CVSS0.00206EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.4 views

CVE-2022-50689 Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...

6.9CVSS6.7AI score0.00206EPSS
SaveExploits1References3
CVE
CVE
added 2025/12/22 9:35 p.m.16 views

CVE-2022-50689

CVE-2022-50689 affects Cobian Reflector 0.9.93 RC1. A denial-of-service can be triggered by overflowing the password input field during SFTP task configuration, e.g., pasting an ~8000-byte buffer into the password field, causing the application to crash. Multiple connected sources (NVD/NVD-derive...

6.9CVSS6.7AI score0.00206EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/12/22 9:35 p.m.30 views

CVE-2022-50689 Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...

6.9CVSS0.00206EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/12/22 12:00 a.m.6 views

Cobian Reflector 安全漏洞

Cobian Reflector is a file backup software by Luis Cobian Personal Developer. A security vulnerability exists in Cobian Reflector version 0.9.93 RC1, which stems from a password input field overflow that could lead to a denial of service attack...

6.9CVSS6.9AI score0.00206EPSS
SaveExploits1References3
Rows per page
Query Builder