Lucene search
+L

1283 matches found

osv_cve
osv_cve
•added 2024/06/04 2:15 p.m.•26 views

CVE-2024-35668

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

6.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/04 1:48 p.m.•55 views

CVE-2024-35668 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS6.5AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/04 1:48 p.m.•31 views

CVE-2024-35668 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•11 views

CVE-2024-35668: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•30 views

RHEL 7 : gupnp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hostapd: UPnP SUBSCRIBE misbehavior in WPS AP CVE-2020-12695 Note that Nessus has not tested for this issue but has...

7.5CVSS6.5AI score0.15193EPSS
SaveExploits4References1
Fedora
Fedora
•added 2024/05/29 3:37 a.m.•27 views

[SECURITY] Fedora 40 Update: qt6-qtmqtt-6.7.1-1.fc40

MQTT is a machine-to-machine M2M protocol utilizing the publish-and-subscri be paradigm, and provides a channel with minimal communication overhead. The Qt MQTT module provides a standard compliant implementation of the MQTT protocol specification. It enables applications to act as telemetry...

9.8CVSS8.1AI score0.0097EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•21 views

eProsima Fast DDS buffer error vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS that stems from a heap buffer overflow that occurs when a publisher provides an incorrectly formatted RTPS packet...

8.2CVSS6.2AI score0.00866EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•21 views

eProsima Fast DDS security vulnerabilities

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS, which stems from a potential process crash when a publisher provides an incorrectly formatted RTPS packet...

8.2CVSS5.8AI score0.00791EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/05/06 12:00 a.m.•21 views

PowerPanel Business SQL Injection File Write

The vulnerability of the PowerPanel Business monitoring and power source management system lies in the lack of measures taken to protect the SQL query structure during the processing of MQTT messages. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code and write...

8.8CVSS6.1AI score0.00533EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2024/05/02 7:13 a.m.•29 views

Denial Of Service (DoS)

github.com/onosproject/onos-ric-sdk-go is vulnerable to Denial of Service DoS.The vulnerability is due to indefinite repetition of error processing within the Subscribe function when handling the subscribed indication stream. This issue may lead to resource exhaustion...

6.5CVSS6.8AI score0.00422EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2024/04/30 12:15 a.m.•27 views

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS6.6AI score0.00422EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/04/30 12:15 a.m.•12 views

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits1References2
Mend
Mend
•added 2024/04/29 12:00 a.m.•10 views

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.9CVSS0.00422EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•13 views

CVE-2023-52726: Loop with Unreachable Exit Condition

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•21 views

PT-2024-14715 · Open Networking Foundation · Onos-Ric-Sdk-Go

Name of the Vulnerable Software and Affected Versions: Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go version 0.8.12 Description: The issue allows for infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...

6.5CVSS6.3AI score0.00422EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2024/04/10 4:15 p.m.•19 views

CVE-2024-31249

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

7.5CVSS7.3AI score0.00514EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/10 4:15 p.m.•34 views

CVE-2024-31249

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

7.5CVSS5.3AI score0.00514EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/10 3:48 p.m.•42 views

CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

5.3CVSS5.6AI score0.00514EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/10 3:48 p.m.•18 views

CVE-2024-31249 WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affects Subscribe To Comments Reloaded: from n/a through 220725...

5.3CVSS8.5AI score0.00514EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/10 3:48 p.m.•97 views

CVE-2024-31249

CVE-2024-31249 is a vulnerability described as an Insertion of Sensitive Information into Log File affecting the WordPress plugin Subscribe To Comments Reloaded (WPKube). Public details indicate the issue impacts the Subscribe To Comments Reloaded plugin up to version 220725 (n/a through 220725)....

7.5CVSS8.6AI score0.00514EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder