Lucene search
K

19 matches found

NVD
NVD
added 2026/05/14 7:16 p.m.34 views

CVE-2026-45148

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate metadata from documents that are invisible to the publish service. This vulnerability is fixed in...

4.3CVSS0.00221EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-2445

Malware in sbrugna...

6.1CVSS6.3AI score0.00639EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 5:6 a.m.5 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.5AI score0.00535EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2023/12/28 6:15 a.m.5 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.8AI score0.00535EPSS
Exploits1References3
NVD
NVD
added 2023/12/28 6:15 a.m.11 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS0.00535EPSS
Exploits1References2
OSV
OSV
added 2023/12/28 6:15 a.m.2 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.4AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/12/28 6:15 a.m.13 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.7AI score0.00535EPSS
Exploits1References4
OSV
OSV
added 2023/12/28 6:15 a.m.1 views

UBUNTU-CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.2AI score0.00535EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.2 views

Shaarli Cross-Site Scripting Vulnerability

Shaarli is a suite of website cloning tools. A cross-site scripting vulnerability exists in Shaarli version v0.12.2, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the search tag function...

6.1CVSS7AI score0.00535EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/12/28 12:0 a.m.19 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.3AI score0.00535EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2023/12/28 12:0 a.m.13 views

CVE-2023-49469

Reflected Cross Site Scripting XSS vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function...

6.1CVSS6.2AI score0.00535EPSS
Exploits1
OSV
OSV
added 2023/02/02 9:22 p.m.3 views

CVE-2022-48082

Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.asmx/SearchTag...

9.8CVSS5.8AI score0.00602EPSS
Exploits0References1
CNVD
CNVD
added 2017/11/06 12:0 a.m.5 views

PG All Share Video SQL Injection Vulnerability

PG All Share Video is a set of video sharing website scripts. A SQL injection vulnerability exists in PG All Share Video version 1.0. A remote attacker can exploit this vulnerability by sending PATHINFO to search/tag, friends/index, or users/profile to inject SQL commands...

9.8CVSS8AI score0.02066EPSS
Exploits4References1
Prion
Prion
added 2017/10/29 6:29 a.m.29 views

Sql injection

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

7.5CVSS9.8AI score0.02066EPSS
Exploits4References2Affected Software1
OSV
OSV
added 2017/10/29 6:29 a.m.3 views

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

9.8CVSS5.8AI score0.02066EPSS
Exploits4References2
NVD
NVD
added 2017/10/29 6:29 a.m.21 views

CVE-2017-15969

PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...

9.8CVSS9.9AI score0.02066EPSS
Exploits4References2
Cvelist
Cvelist
added 2017/07/19 7:0 a.m.12 views

CVE-2017-10801

phpSocial formerly phpDolphin before 3.0.1 has XSS in the PATHINFO to the search/tag/ URI...

6AI score0.00639EPSS
Exploits0References2
Exploit DB
Exploit DB
added 2009/01/01 12:0 a.m.18 views

OSX/PPC - Stager Sock Find Shellcode

OSX/PPC - Stager Sock Find Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockfind ; Qualities: Can Have Nulls ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of the Metasploit Exploi...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2009/01/01 12:0 a.m.51 views

OSX/PPC - Stager Sock Find MSG_PEEK + Null-Free Shellcode

OSX/PPC - Stager Sock Find MSGPEEK + Null-Free Shellcode. Shellcode exploit for OSXPPC platform. Tags: Metasploit Framework MSF ;; ; ; Name: stagersockfindpeek ; Qualities: Null-Free ; Platforms: MacOS X / PPC ; Authors: H D Moore ; Version: $Revision: 1.1 $ ; License: ; ; This file is part of th...

7.1AI score
Exploits0
Rows per page
Query Builder