Lucene search
K

7 matches found

OSV
OSV
added 2024/08/30 4:15 a.m.3 views

CVE-2024-5024

The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'meprscreenname' and 'meprkey' parameter in all versions up to, and including, 1.11.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS6AI score0.01098EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/08/30 2:46 a.m.4 views

WordPress MemberPress plugin <= 1.11.29 - Reflected Cross-Site Scripting via mepr_screenname and mepr_key Parameters vulnerability

Reflected Cross-Site Scripting via meprscreenname and meprkey Parameters vulnerability discovered by stealthcopter in WordPress Plugin MemberPress versions = 1.11.29...

6.1CVSS6.4AI score0.01098EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.2 views

PT-2024-34071 · WordPress · Memberpress

Name of the Vulnerable Software and Affected Versions: Memberpress plugin for WordPress versions up to, and including, 1.11.29 Description: The issue is related to Reflected Cross-Site Scripting XSS due to insufficient input sanitization and output escaping. This allows unauthenticated attackers ...

6.1CVSS6.1AI score0.01098EPSS
Exploits0References8
CVE
CVE
added 2024/07/26 8:36 a.m.74 views

CVE-2024-25090

Apache Roller is affected by a cross-site scripting (XSS) vulnerability due to insufficient input validation and sanitation in Profile name & screenname, Bookmark name & description, and blogroll name fields across versions 5.0.0 to 6.1.2. The issue can be exploited by an authenticated user to pe...

5.4CVSS5.9AI score0.00448EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.13 views

CVE-2002-0785

AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...

7AI score0.02238EPSS
Exploits1References5
NVD
NVD
added 2002/08/12 4:0 a.m.9 views

CVE-2002-0785

AOL Instant Messenger AIM allows remote attackers to cause a denial of service crash via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow...

5CVSS7AI score0.02238EPSS
Exploits1References5
CERT
CERT
added 2002/01/16 12:0 a.m.22 views

AOL Instant Messenger buffer overflow in screename

Overview A buffer overflow exists in the AOL Instant Messenger AIM client versions 3.5.x and prior when accepting the screenname from the command line, or through the aim protocol. Description AIM installs a protocol on the machine that enables people to post links on their websites, or send them...

7.6AI score
Exploits0References1
Rows per page
Query Builder