Lucene search
+L

4532 matches found

CVE
CVE
added 2023/12/06 9:0 a.m.62 views

CVE-2023-49245

CVE-2023-49245 concerns the Huawei Share module in Huawei HarmonyOS. Affected component: Huawei Share; root cause described as an unauthorized access vulnerability that could compromise service confidentiality. The NVD entry assigns a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No...

7.5CVSS7.5AI score0.00443EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/06 9:0 a.m.27 views

CVE-2023-49245

Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect service confidentiality...

7.7AI score0.00443EPSS
SaveExploits0References2
NVD
NVD
added 2023/12/06 4:15 a.m.24 views

CVE-2023-40053

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

5CVSS0.00833EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/06 4:15 a.m.7 views

CVE-2023-40053

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

5CVSS5.7AI score0.00833EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/06 4:15 a.m.14 views

Design/Logic Flaw

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

4CVSS6.8AI score0.00833EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/12/06 3:23 a.m.68 views

CVE-2023-40053

The affected product is SolarWinds Serv-U 15.4. A vulnerability in the file share function allows an authenticated actor to insert content, potentially enabling malicious use. CVSS v3.1 base score 5.0 (Medium) with network access, low attack complexity, low privileges required, and changed scope....

5CVSS5AI score0.00833EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/06 3:23 a.m.36 views

CVE-2023-40053 HTML injection Vulnerability in Serv-U 15.4

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

5CVSS5.3AI score0.00833EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/12/06 1:15 a.m.3 views

CVE-2023-28875

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link...

5.4CVSS6AI score0.00425EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/06 1:15 a.m.6 views

CVE-2023-28875

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link...

5.4CVSS5.8AI score0.00425EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/06 12:0 a.m.35 views

CVE-2023-28875

A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code that is executed when a user follows the crafted share link...

5.4AI score0.00425EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/06 12:0 a.m.11 views

PT-2023-31132 · Huawei · Huawei Share

Name of the Vulnerable Software and Affected Versions: Huawei Share module affected versions not specified Description: The issue is related to unauthorized access in the Huawei Share module. Successful exploitation may affect service confidentiality. Recommendations: At the moment, there is no...

7.5CVSS7.3AI score0.00443EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/06 12:0 a.m.7 views

SolarWinds Serv-U FTP Server Input Validation Error Vulnerability

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. An input validation error vulnerability exists in SolarWinds Serv-U FTP Server version 15.4, which originates from allowing an authenticated attacker to insert content on the fi...

5CVSS5.2AI score0.00833EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/05 12:0 a.m.24 views

SolarWinds Serv-U 15.4 < 15.4.1

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.1. It is, therefore, affected by a vulnerability as referenced in the serv-u1541 advisory. - A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share...

5CVSS5.5AI score0.00833EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/30 12:15 p.m.43 views

CVE-2023-48329

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...

5.9CVSS0.00386EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/30 12:15 p.m.6 views

CVE-2023-48329

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...

4.8CVSS7.3AI score0.00386EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/30 12:15 p.m.23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...

4.3CVSS6.9AI score0.00386EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/30 11:12 a.m.79 views

CVE-2023-48329

CVE-2023-48329 affects the WordPress plugin Fast Custom Social Share by CodeBard (versions ≤ 1.1.1). The issue is a Cross-Site Scripting (Stored XSS) caused by improper neutralization during web page generation. Exploitation requires administrator privileges, and the vulnerability status is curre...

5.9CVSS6.5AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/30 11:12 a.m.33 views

CVE-2023-48329 WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1...

5.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/30 12:0 a.m.7 views

WordPress Plugin Fast Custom Social Share by CodeBard Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

5.9CVSS5.9AI score0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.8 views

PT-2023-30789 · Codebard · Codebard Fast Custom Social Share

Name of the Vulnerable Software and Affected Versions: CodeBard Fast Custom Social Share versions through 1.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...

5.9CVSS5.7AI score0.00386EPSS
SaveExploits0References5
Rows per page
Query Builder