Lucene search
+L

397 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-13917 Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-36819 Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2025/07/16 3:15 p.m.9 views

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

5.4CVSS0.0017EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/16 12:0 a.m.11 views

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

0.0017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/16 12:0 a.m.10 views

PT-2025-29836 · Meta Inf Kft. · Email This Issue

Name of the Vulnerable Software and Affected Versions: META-INF Kft. Email This Issue Data Center versions prior to 9.13.0-GA Description: A cross-site scripting XSS issue exists in META-INF Kft. Email This Issue Data Center. Attackers can execute arbitrary web scripts or HTML by injecting a...

5.4CVSS5.7AI score0.0017EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/07/16 12:0 a.m.5 views

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

5.9AI score0.0017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.5 views

META-INF Kft. Email This Issue 安全漏洞

META-INF Kft. Email This Issue is an advanced email management plugin for Jira from Hungarian company META-INF Kft. A security vulnerability exists in versions prior to META-INF Kft. Email This Issue 9.13.0-GA, which stems from the injection of a specially crafted payload into the recipient field...

5.4CVSS6.8AI score0.0017EPSS
Exploits0References2
CVE
CVE
added 2025/07/16 12:0 a.m.30 views

CVE-2024-42912

The CVE-2024-42912 issue affects META-INF Kft. Email This Issue (Data Center) prior to version 9.13.0-GA. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary web scripts or HTML by crafting a payload into the recipient field of an e-mail message. Imp...

5.4CVSS5.6AI score0.0017EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/11 12:0 a.m.9 views

The vulnerability of the IFTTT Build Notifier plugin in the Jenkins automation server, related to the storage of keys in an exposed manner, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the IFTTT Build Notifier plugin in the Jenkins automation server lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.8CVSS5.4AI score0.00281EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/07/09 12:0 a.m.5 views

Jenkins plugin IFTTT Build Notifier 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...

6.5CVSS6.1AI score0.00281EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:11 a.m.8 views

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...

5.3CVSS6.8AI score0.00203EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:57 a.m.8 views

CVE-2024-33930

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ILLID Share This Image.This issue affects Share This Image: from n/a through 1.97...

4.7CVSS5.1AI score0.00384EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:19 a.m.7 views

CVE-2024-8108

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5.8AI score0.0036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:17 a.m.8 views

CVE-2024-8363

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00394EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:39 a.m.6 views

CVE-2024-51838

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smajda Pull This pull-this allows DOM-Based XSS.This issue affects Pull This: from n/a through = 1.1...

6.5CVSS7.2AI score0.00374EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:1 a.m.4 views

CVE-2023-28696

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0...

8.8CVSS6.9AI score0.00321EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/22 12:48 p.m.3 views

Malicious code in manage-this (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2025/05/22 12:48 p.m.1 views

MAL-2025-4184 Malicious code in manage-this (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
Rows per page
Query Builder