CVE-2024-52356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through = 2.1.0...

CVE-2024-51788

Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through = 4.3.0...

CVE-2021-29442

creationtimestamp| type| source ---|---|--- 2024-11-11 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-11 2024-11-12 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-12 2024-11-18 00:00:00+00:00| seen| The Shadowserver...

The vulnerability of the storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the data storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E is related to the use of a non-unique TLS certificate. Exploiting this vulnerability allows attackers to carry out “man-in-the-middle”...

LibOSDP 安全漏洞

LibOSDP is a goToMain open source cross-platform open source implementation of the IEC 60839-11-5 Open Surveillance Device Protocol. Designed to improve interoperability between access control and security products. A security vulnerability exists in versions prior to LibOSDP 3.0.0 that stems fro...

CVE-2017-15363

creationtimestamp| type| source ---|---|--- 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-12-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-15 2024-12-16 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-51779

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

CVE-2024-51779 WordPress Don't Break The Code plugin <= .3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jason Coleman Don't Break The Code dont-break-the-code allows Reflected XSS.This issue affects Don't Break The Code: from n/a through = .3.1...

SUSE CVE-2024-50196

In the Linux kernel, the following vulnerability has been resolved: pinctrl: ocelot: fix system hang on level based interrupts The current implementation only calls chainedirqenter and chainedirqexit if it detects pending interrupts. for i = 0; i stride; i++ uregmapreadinfo-map, idreg + 4 i, ®...

WordPress plugin Don t Break The Code 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugi...

WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin The Pack Elementor addons versions = 2.1.0...

CVE-2024-7982 Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS

The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks...

PT-2024-39521 · WordPress · The User Meta

Name of the Vulnerable Software and Affected Versions: The User Meta – User Profile Builder and User management plugin for WordPress versions up to, and including, 3.1 Description: The issue is related to Insecure Direct Object Reference, which can be exploited by authenticated attackers with...

CVE-2019-12276

creationtimestamp| type| source ---|---|--- 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-12-23 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-23 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

PT-2024-39833 · WordPress · The Anih - Creative Agency Wordpress Theme

Name of the Vulnerable Software and Affected Versions: The Anih - Creative Agency WordPress Theme versions up to, and including, 2024 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to an incomplete blacklist, insufficient input sanitization, and output...

PT-2024-39904 · WordPress · The Poll Maker – Versus Polls

Name of the Vulnerable Software and Affected Versions: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress versions up to, and including, 5.4.6 Description: The issue is related to time-based SQL Injection via the orderby parameter due to insufficient escaping on the...

CVE-2024-40715

CVE-2024-40715 affects Veeam Backup Enterprise Manager (VBEM) and enables authentication bypass when an attacker can perform a Man-in-the-Middle (MITM) attack. Public writeups in connected documents confirm the vulnerability is tied to VBEM and that exploitation requires MITM conditions. The reme...

CVE-2024-40715

A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle MITM attack to exploit this vulnerability...

CVE-2024-40715

A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle MITM attack to exploit this vulnerability...

CVE-2018-11222

creationtimestamp| type| source ---|---|--- 2024-11-07 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-07 2024-12-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-23 2025-01-12 00:00:00+00:00| seen| The Shadowserver...