Lucene search
+L

774 matches found

Cvelist
Cvelist
added 2025/03/24 1:47 p.m.24 views

CVE-2025-30623 WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry wA11y – The Web Accessibility Toolbox wa11y allows Stored XSS.This issue affects wA11y – The Web Accessibility Toolbox: from n/a through = 1.0.3...

5.9CVSS0.00266EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:7 p.m.7 views

WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin wA11y – The Web Accessibility Toolbox versions = 1.0.3...

5.9CVSS6.1AI score0.00266EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.6 views

WordPress plugin wA11y – The Web Accessibility Toolbox 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.8AI score0.00266EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2025/03/17 8:16 p.m.15 views

toolbox security update

An update is available for toolbox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Toolbox is a tool for Linux operating systems, which allows the use of...

7.5CVSS7.2AI score0.01414EPSS
SaveExploits0
OSV
OSV
added 2025/03/17 8:16 p.m.24 views

RLSA-2024:9135 Moderate: toolbox security update

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI. Security Fixes: golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in...

7.5CVSS7.1AI score0.01414EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 7:34 p.m.12 views

CVE-2022-39062

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...

7.8CVSS6.5AI score0.00155EPSS
SaveExploits0References1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.50 views

CVE-2020-25013 affecting package toolbox 0.0.18-9

CVE-2020-25013 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never applicable...

7.5CVSS7.2AI score0.01367EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.72 views

CVE-2020-25207 affecting package toolbox 0.0.18-9

CVE-2020-25207 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never applicable...

10CVSS7.2AI score0.04379EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.25 views

CVE-2019-14959 affecting package toolbox 0.0.18-9

CVE-2019-14959 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never applicable...

5.9CVSS7.2AI score0.00656EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.257 views

CVE-2019-12280 affecting package toolbox 0.0.18-9

CVE-2019-12280 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never applicable...

7.8CVSS7.2AI score0.02088EPSS
SaveExploits0
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.48 views

CVE-2019-18368 affecting package toolbox 0.0.18-9

CVE-2019-18368 affecting package toolbox 0.0.18-9. This CVE either no longer is or was never applicable...

7.5CVSS7.2AI score0.01041EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.6 views

WordPress plugin ImmoToolBox Connect 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.9AI score0.00339EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/12 3:23 a.m.27 views

CVE-2024-12338 Website Toolbox Community <= 2.0.1 - Reflected Cross-Site Scripting via websitetoolbox_username

The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘websitetoolboxusername’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...

6.1CVSS0.00397EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/12 3:23 a.m.44 views

CVE-2024-12338

CVE-2024-12338 affects Website Toolbox Community plugin for WordPress. The vulnerability is a Reflected Cross-Site Scripting via the websitetoolbox_username parameter in all versions up to 2.0.1, caused by insufficient input sanitization and output escaping. Impact: attackers can inject web scrip...

6.1CVSS6.4AI score0.00397EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/12 12:35 a.m.8 views

WordPress Website Toolbox Community plugin <= 2.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Website Toolbox Community versions = 2.0.1...

6.1CVSS6.3AI score0.00397EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.8 views

WordPress plugin Website Toolbox Community 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.6AI score0.00397EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/12 12:0 a.m.14 views

PT-2024-17550 · WordPress · Website Toolbox Community

Name of the Vulnerable Software and Affected Versions: Website Toolbox Community plugin for WordPress versions up to, and including, 2.0.1 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows...

6.1CVSS7.7AI score0.00397EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/10 12:31 a.m.5 views

Malicious code in binance-toolbox-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a585655865db20c2d6f9419d9c516d93d59ac420d066bda570716d917933605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/12/10 12:31 a.m.4 views

MAL-2024-12138 Malicious code in binance-toolbox-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a585655865db20c2d6f9419d9c516d93d59ac420d066bda570716d917933605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.18 views

CVE-2024-50547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

6.5CVSS0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder