Lucene search
K

3230 matches found

NVD
NVD
added 2025/01/14 5:15 p.m.10 views

CVE-2025-0464

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS0.00133EPSS
Exploits1References4
OSV
OSV
added 2025/01/14 5:15 p.m.1 views

CVE-2025-0464

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

4.8CVSS3.8AI score0.00133EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/01/14 5:0 p.m.14 views

CVE-2025-0464 SourceCodester Task Reminder System Maintenance Section cross site scripting

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS0.00133EPSS
Exploits1References4
CVE
CVE
added 2025/01/14 5:0 p.m.57 views

CVE-2025-0464

SourceCodester Task Reminder System 1.0 is affected in the Maintenance Section. The vulnerability stems from the System Name parameter, enabling cross-site scripting (XSS). The attack can be launched remotely and the exploit has been disclosed publicly. Mitigation guidance available in connected ...

5.1CVSS3.5AI score0.00133EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/14 5:0 p.m.7 views

CVE-2025-0464 SourceCodester Task Reminder System Maintenance Section cross site scripting

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be...

5.1CVSS6.2AI score0.00133EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.3 views

PT-2025-3900 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A problem was found in the Maintenance Section component of the system, affecting an unknown functionality. The issue arises from the manipulation of the System Name argument, leadi...

5.1CVSS6.2AI score0.00133EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/01/14 12:0 a.m.2 views

SourceCodester Task Reminder System 安全漏洞

SourceCodester Task Reminder System is an open source task reminder system from Sourcecodester. A security vulnerability exists in SourceCodester Task Reminder System version 1.0, which stems from a cross-site scripting attack due to a parameter System Name in the Maintenance Section of the...

5.1CVSS3.9AI score0.00133EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/01/13 5:50 a.m.6 views

CVE-2024-57881

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...

5.5CVSS7AI score0.00033EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/01/12 12:14 a.m.1 views

SUSE CVE-2024-57838

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

5.5CVSS7.7AI score0.00014EPSS
Exploits0References13
Vulnrichment
Vulnrichment
added 2025/01/11 3:10 p.m.2 views

CVE-2024-57881 mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...

7.6AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/11 3:10 p.m.11 views

CVE-2024-57881 mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...

0.00033EPSS
Exploits0References2
OSV
OSV
added 2025/01/11 2:8 p.m.6 views

CVE-2024-57838 s390/entry: Mark IRQ entries to fix stack depot warnings

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace...

7.1CVSS6.2AI score0.00014EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/01/09 8:1 a.m.2 views

WordPress BU Section Editing plugin <= 0.9.9 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin BU Section Editing versions = 0.9.9...

6.1CVSS6.4AI score0.00292EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 6:0 a.m.5 views

CVE-2024-12736 BU Section Editing <= 0.9.9 - Reflected XSS

The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1AI score0.00292EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/09 6:0 a.m.10 views

CVE-2024-12736 BU Section Editing <= 0.9.9 - Reflected XSS

The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00292EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

WordPress plugin BU Section Editing 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in the...

6.1CVSS7.6AI score0.00292EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.3 views

PT-2025-1671 · Progress · Sitefinity

Name of the Vulnerable Software and Affected Versions: Progress Sitefinity versions 4.0 through 14.4.8142 Progress Sitefinity versions 15.0.8200 through 15.0.8229 Progress Sitefinity versions 15.1.8300 through 15.1.8327 Progress Sitefinity versions 15.2.8400 through 15.2.8421 Description: The iss...

8.4CVSS5.4AI score0.00127EPSS
Exploits0References10
NVD
NVD
added 2025/01/02 12:15 p.m.4 views

CVE-2024-56018

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BU Web Team BU Section Editing bu-section-editing allows Reflected XSS.This issue affects BU Section Editing: from n/a through = 0.9.9...

7.1CVSS0.00144EPSS
Exploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.36 views

CVE-2024-56018

CVE-2024-56018 is a Reflected XSS in BU Section Editing (Boston University IS&T). Affected: BU Section Editing versions from n/a to 0.9.9. Root cause and precise exploit details are not provided beyond the XSS description in the initial document; no patch/version fix is documented in the connecte...

7.1CVSS7.2AI score0.00144EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.2 views

WordPress plugin BU Section Editing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

7.1CVSS7.5AI score0.00144EPSS
Exploits0References1
Rows per page
Query Builder