Lucene search
+L

4590 matches found

CVE
CVE
•added 2023/12/21 1:53 p.m.•56 views

CVE-2023-6122

Vulnerability : CVE-2023-6122 is a reflected XSS in Softomi Gelişmiş C2C Pazaryeri Yazılımı (Softomi Advanced C2C Marketplace) prior to version 12122023, caused by improper neutralization of user input during web page generation. Impact : potential confidentiality/integrity impact with no availab...

6.1CVSS6.4AI score0.00414EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/21 1:53 p.m.•48 views

CVE-2023-6122 Reflected XSS in Softomi E-commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı allows Reflected XSS. This issue affects Softomi Gelişmiş C2C Pazaryeri Yazılımı: before 12122023...

6.1CVSS6.5AI score0.00414EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/16 12:00 a.m.•3 views

PT-2023-9553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's mhi component, where a vulnerability has been resolved by dropping the channel lock before queuing buffers. This ensures that read and write...

5.5CVSS5.7AI score0.00209EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•19 views

Nature Easy Soft Network Technology ZenTao Cross-Site Scripting Vulnerability

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management and other...

6.1CVSS6.2AI score0.00693EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
•added 2023/11/28 3:40 p.m.•17 views

kernel: md: fix soft lockup in status_resync

A logic flaw was found in the Linux kernel Multiple Device software RAID status reporting, where concurrent updates to resynchronization progress can overflow an internal difference calculation. This can cause the progress bar routine to loop excessively and trigger a soft lockup. A local user...

5.5CVSS7.3AI score0.00152EPSS
SaveExploits0References5
NVD
NVD
•added 2023/11/23 12:15 a.m.•37 views

CVE-2023-47835

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...

6.5CVSS0.00377EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/23 12:15 a.m.•29 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...

4.9CVSS7.2AI score0.00377EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/22 11:20 p.m.•92 views

CVE-2023-47835

CVE-2023-47835 — ARI Stream Quiz (WordPress)

6.5CVSS6AI score0.00377EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/22 11:20 p.m.•51 views

CVE-2023-47835 WordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder plugin = 1.2.32 versions...

6.5CVSS6.7AI score0.00377EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/15 1:15 a.m.•31 views

CVE-2023-43979

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

9.8CVSS0.00693EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/15 1:15 a.m.•14 views

CVE-2023-43979

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

9.8CVSS5.8AI score0.00693EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/11/15 1:15 a.m.•11 views

CVE-2023-43979

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

9.8CVSS5.9AI score0.00693EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/15 1:15 a.m.•25 views

Sql injection

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

7.5CVSS8.6AI score0.00693EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/15 12:00 a.m.•32 views

CVE-2023-43979

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

10AI score0.00693EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/15 12:00 a.m.•52 views

CVE-2023-43979

The CVE-2023-43979 vulnerability affects ETS Soft ybc_blog (PrestaShop module) via the getPosts() function in Ybc_blogBlogModuleFrontController. It is a SQL injection in the blog component, impacting versions prior to 4.4.0. The NVD entry lists a high-severity impact (C, I, A) with network attack...

9.8CVSS9.7AI score0.00693EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/15 12:00 a.m.•5 views

CVE-2023-43979: Improper Neutralization of Special Elements used in an SQL Command

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

9.8CVSS8.1AI score0.00693EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/11/15 12:00 a.m.•19 views

CVE-2023-43979

ETS Soft ybcblog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component YbcblogBlogModuleFrontController::getPosts...

8.3AI score0.00693EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/14 11:15 p.m.•39 views

CVE-2023-45624

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS0.0087EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/14 11:15 p.m.•21 views

CVE-2023-45624

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

7.5CVSS5.8AI score0.0087EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/14 11:15 p.m.•27 views

Denial of service

An unauthenticated Denial-of-Service DoS vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point...

5CVSS7.1AI score0.0087EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder