Lucene search
+L

12375 matches found

Cvelist
Cvelist
added 2022/04/15 4:24 p.m.27 views

CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

5.3CVSS7.5AI score0.04619EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/04/15 4:24 p.m.12 views

CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

5.3CVSS6AI score0.04619EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/15 10:48 a.m.7 views

CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

5.4CVSS4.9AI score0.00391EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/15 10:14 a.m.6 views

CVE-2022-27849

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

7.5CVSS7.3AI score0.04619EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/04/15 12:00 a.m.28 views

Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option...

3.3CVSS3.2AI score0.00446EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/04/15 12:00 a.m.29 views

GHSA-H5WH-7H2J-H999 Exposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon

SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality...

4.4CVSS4.5AI score0.00444EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.11 views

WordPress 插件 Simple Ajax Chat跨站请求伪造漏洞

WordPress is a product of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Simple Ajax Chat plugin has a cross-site request forgery vulnerability, whic...

5.4CVSS5.4AI score0.00391EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.10 views

WordPress 插件 Simple Ajax Chat 信息泄露漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Simple Ajax Chat plugin has an information disclosure vulnerability, no detailed vulnerability details are provided...

7.5CVSS5.6AI score0.04619EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/14 1:15 p.m.3 views

ALPINE-CVE-2022-27455

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component mywildcmp8bitimpl at /strings/ctype-simple.c...

7.5CVSS7.3AI score0.01564EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/04/14 12:00 a.m.10 views

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a branch version of MySQL that uses the Maria storage engine. a memory misquote vulnerability exists in MariaDB v10.6.3 and lower, which originates in the /strings/ctype-simple.c component my...

7.5CVSS7.6AI score0.01564EPSS
SaveExploits1References14
NVD
NVD
added 2022/04/13 11:15 p.m.34 views

CVE-2021-43154

Cross Site Scripting XSS vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php...

6.1CVSS0.00553EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/13 11:15 p.m.6 views

CVE-2021-43154

Cross Site Scripting XSS vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php...

6.1CVSS6.4AI score0.00553EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/13 11:15 p.m.11 views

CVE-2021-43154

Cross Site Scripting XSS vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php...

6.1CVSS5.8AI score0.00553EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/13 11:15 p.m.24 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php...

4.3CVSS6AI score0.00553EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/13 10:20 p.m.37 views

CVE-2021-43154

Cross Site Scripting XSS vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php...

6.1AI score0.00553EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/13 10:20 p.m.70 views

CVE-2021-43154

CVE-2021-43154 affects CMS Made Simple 2.2.15, with a cross-site scripting (XSS) flaw in the Name field of the Add Category action in moduleinterface.php. The vulnerability stems from insufficient input sanitization/validation in that field, allowing injected scripts to be stored or reflected. Re...

6.1CVSS5.9AI score0.00553EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/13 4:00 p.m.10 views

CVE-2022-20684

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of...

7.4CVSS6.5AI score0.00515EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/13 12:00 a.m.11 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...

6.1CVSS6.2AI score0.00553EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/04/12 5:15 p.m.6 views

CVE-2022-27657

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run Simple Diagnostics Agent 1.0 - version 1.0...

4CVSS5.9AI score0.02476EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/04/12 5:15 p.m.10 views

CVE-2022-27657

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run Simple Diagnostics Agent 1.0 - version 1.0...

2.7CVSS6.5AI score0.02476EPSS
SaveExploits1References4
Rows per page
Query Builder