Lucene search
+L

10328 matches found

Cvelist
Cvelist
added 2024/11/09 2:46 p.m.36 views

CVE-2024-51593 WordPress Курс валют UAH plugin <= 2.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Glopium Курс валют UAH ukrainian-currency allows Stored XSS.This issue affects Курс валют UAH: from n/a through = 2.0...

6.5CVSS0.00314EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 2:46 p.m.58 views

CVE-2024-51593

CVE-2024-51593 is a stored XSS vulnerability in the WordPress Курс валют UAH plugin, involving improper input neutralization during page generation. Affected versions are n/a through 2.0. The connected sources (Patchstack and CVE records) confirm that the issue is a stored XSS in that plugin and ...

6.5CVSS5.9AI score0.00314EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/09 2:46 p.m.15 views

CVE-2024-51593 WordPress Курс валют UAH plugin <= 2.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Glopium Курс валют UAH ukrainian-currency allows Stored XSS.This issue affects Курс валют UAH: from n/a through = 2.0...

6.5CVSS5.9AI score0.00314EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/09 2:15 p.m.9 views

CVE-2024-51662

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.6...

5.4CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/09 2:15 p.m.27 views

CVE-2024-51662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets.This issue affects Black Widgets For Elementor: from n/a through = 1.3.6...

6.5CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 1:12 p.m.58 views

CVE-2024-51662

CVE-2024-51662 is a stored XSS in WordPress plugin Black Widgets For Elementor (versions ≤ 1.3.6) due to improper input neutralization during page generation. Connected sources confirm affected plugin and version range, with remediation guidance to upgrade to a version later than 1.3.6 (cited by ...

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/09 12:00 a.m.11 views

PT-2024-34736 · Unknown · Glopium Studio Курс Валют Uah

Name of the Vulnerable Software and Affected Versions: Glopium Studio Курс валют UAH versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This is a Stored XSS vulnerability, which means...

6.5CVSS5.6AI score0.00314EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/11/06 12:00 a.m.11 views

The vulnerability of Omron Sysmac Studio, a software development environment for automating and managing manufacturing processes, stems from deficiencies in its authentication procedures. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Omron Sysmac Studio, a software for automating and managing manufacturing processes, is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected...

5.7CVSS6.1AI score0.0018EPSS
SaveExploits0References4Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/11/05 6:29 a.m.11 views

Incorrect authorization vulnerability in OMRON Sysmac Studio

Overview Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability CWE-863, CVE-2024-49501. OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC coordinated with OMRON Corporation for the JVN advisory...

5.7CVSS6.6AI score0.0018EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2024/11/05 12:00 a.m.347 views

ABB Cylon Aspect 3.08.00 Off-By-One

ABB Cylon Aspect 3.08.00 logMix/YumLookup.php Off-by-One Error in Log Parsing Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.00 Summary: ASPECT is an award-winning scalable building energy...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/11/05 12:00 a.m.9 views

The vulnerability of the Collector Service in the Microsoft Visual Studio software development environment allows a hacker to induce a service failure.

The vulnerability of the Collector Service in the Microsoft Visual Studio software development environment is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.4AI score0.00767EPSS
SaveExploits0References3Affected Software3
NVD
NVD
added 2024/11/01 5:15 a.m.17 views

CVE-2024-49501

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function...

5.7CVSS0.0018EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/01 4:07 a.m.24 views

CVE-2024-49501

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function...

5.7CVSS0.0018EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/01 4:07 a.m.13 views

CVE-2024-49501

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function...

5.7CVSS6.8AI score0.0018EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2024/11/01 12:00 a.m.459 views

ABB Cylon Aspect 3.08.01 File Upload MD5 Checksum Bypass

ABB Cylon Aspect 3.08.01 badassMode File Upload MD5 Checksum Bypass Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy managemen...

7.4AI score
SaveExploits0
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.16 views

OMRON Sysmac Studio 安全漏洞

Omron Sysmac Studio is a unique environment from Omron Japan that integrates logic, motion and drives, robotics, safety, visualization, sensing, and information technology into a single project, thereby reducing the learning curve and intraoperative software costs. A security vulnerability exists...

5.7CVSS5.5AI score0.0018EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/01 12:00 a.m.25 views

The vulnerability of the .NET software platform and Microsoft Visual Studio, a development environment for software, stems from insufficient testing of input data. This allows attackers to exploit their privileges.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.5CVSS6.8AI score0.006EPSS
SaveExploits0References8Affected Software5
ATTACKERKB
ATTACKERKB
added 2024/10/31 7:15 p.m.5 views

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...

9.8CVSS5.9AI score0.0079EPSS
SaveExploits1References2
NVD
NVD
added 2024/10/31 7:15 p.m.44 views

CVE-2023-52045

Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting XSS vulnerability...

6.1CVSS0.00272EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/10/31 7:15 p.m.11 views

CVE-2023-52045

Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting XSS vulnerability...

6.1CVSS5.8AI score0.00272EPSS
SaveExploits1References2
Rows per page
Query Builder