Lucene search
K

10 matches found

OSV
OSV
added 2023/05/09 12:0 a.m.8 views

MAL-2023-93 Malicious code in angra_temple_of_shadows_songbook_pdf_105_kssry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd6df7b7b696150a1e7a19bda7c02dda2686dd2e2be7b1cf257c6fb4c9de50c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/09 12:0 a.m.2 views

Malicious code in angra_temple_of_shadows_songbook_pdf_105_kssry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd6df7b7b696150a1e7a19bda7c02dda2686dd2e2be7b1cf257c6fb4c9de50c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2021/08/16 7:15 p.m.1 views

CVE-2021-34655

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

6.1CVSS5.8AI score0.0021EPSS
Exploits1References2
NVD
NVD
added 2021/08/16 7:15 p.m.11 views

CVE-2021-34655

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

6.1CVSS0.0021EPSS
Exploits1References2
Prion
Prion
added 2021/08/16 7:15 p.m.7 views

Cross site scripting

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

4.3CVSS6.1AI score0.0021EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/08/16 6:22 p.m.13 views

CVE-2021-34655 WP Songbook <= 2.0.11 Reflected Cross-Site Scripting

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

6.1CVSS6.2AI score0.0021EPSS
Exploits1References2
CVE
CVE
added 2021/08/16 6:22 p.m.105 views

CVE-2021-34655

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter in ~/inc/class.ajax.php, affecting versions up to 2.0.11. This allows injecting arbitrary web scripts. Exploitation status and fixes are not provided in the supplied documents; no remediation de...

6.1CVSS6AI score0.0021EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/08/16 6:22 p.m.5 views

CVE-2021-34655 WP Songbook <= 2.0.11 Reflected Cross-Site Scripting

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

6.1CVSS6AI score0.0021EPSS
Exploits1References2
Patchstack
Patchstack
added 2021/08/13 12:0 a.m.15 views

WordPress WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress WP Songbook versions = 2.0.11. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.6AI score0.0021EPSS
Exploits1References3Affected Software1
vulnersOsv
vulnersOsv
added 2021/08/03 7:0 p.m.7 views

@alex.garcia/oak (>=0.0.17 <=0.0.19), @apify/better-sqlite3-prebuilds (=7.1.1) +195 more potentially affected by CVE-2021-32803 via tar (>=4.0.1 <=4.4.13)

tar NPM version =4.0.1, =0.0.17, =0.0.1, =0.2.0, =0.2.0, =3.0.7, =3.0.6, =1.4.0, =1.0.0, =1.0.0-alpha.1, =1.10.9-beta, =1.0.0, =1.1.4, =2.1.0, =2.2.0 and more Source cves: CVE-2021-32803 Source advisory: OSV:GHSA-R628-MHMH-QJHW...

8.2CVSS6.7AI score0.00122EPSS
Exploits0
Rows per page
Query Builder