Lucene search
+L

251 matches found

OSV
OSV
added 2024/10/28 1:15 p.m.6 views

CVE-2024-50471

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Checklist Trip Plan allows Stored XSS.This issue affects Trip Plan: from n/a through 1.0.10...

5.4CVSS5.8AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/28 1:15 p.m.16 views

CVE-2024-50471

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.This issue affects Trip Plan: from n/a through = 1.0.10...

6.5CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 12:45 p.m.13 views

CVE-2024-50471 WordPress Trip Plan plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.This issue affects Trip Plan: from n/a through = 1.0.10...

6.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/28 12:45 p.m.23 views

CVE-2024-50471 WordPress Trip Plan plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Trip Plan tripplan allows DOM-Based XSS.This issue affects Trip Plan: from n/a through = 1.0.10...

6.5CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/28 12:45 p.m.50 views

CVE-2024-50471

CVE-2024-50471: WordPress Trip Plan plugin versions n/a through 1.0.10 are affected by a Stored XSS due to improper input neutralization during web page generation. The vulnerability affects the Trip Plan plugin (

6.5CVSS5.9AI score0.00248EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.10 views

PT-2024-34248 · Unknown · Checklist Trip Plan

Name of the Vulnerable Software and Affected Versions: Checklist Trip Plan versions n/a through 1.0.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.3 views

WordPress plugin Trip Plan 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6AI score0.00248EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/24 12:51 p.m.7 views

WordPress Trip Plan plugin <= 1.0.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Trip Plan versions = 1.0.10...

6.5CVSS6.1AI score0.00248EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/24 12:0 a.m.12 views

WordPress Trip Plan Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)

Software Trip Plan Type Plugin Vulnerable versions = 1.0.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50471 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID be92d248bf15 Credits SOPROBRO Required privilege Contributor...

6.5CVSS6.5AI score0.00248EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/10/16 12:25 p.m.3 views

MAL-2024-9477 Malicious code in @taxify/trippricingopt (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/10/14 4:15 a.m.2 views

DEBIAN-CVE-2024-49214

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality...

5.3CVSS5.6AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/14 4:15 a.m.8 views

UBUNTU-CVE-2024-49214

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality...

5.3CVSS5.8AI score0.00515EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/10/14 12:0 a.m.6 views

HAProxy 安全漏洞

HAProxy is an open source TCP/HTTP load balancing server from the French company HAProxy. The server provides Layer 4 and Layer 7 proxies and can support tens of thousands of connection levels with high efficiency and stability. A security vulnerability exists in HAProxy that stems from the use o...

5.3CVSS5.3AI score0.00515EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2024/09/03 12:0 a.m.9 views

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel component is related to the assignment of the zero pointer TZGETTRIP. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.0021EPSS
SaveExploits0References9Affected Software2
ATTACKERKB
ATTACKERKB
added 2024/08/29 8:15 p.m.3 views

CVE-2024-41345

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/trip.php...

6.1CVSS5.9AI score0.00263EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/08/29 12:0 a.m.5 views

openflights 安全漏洞

OpenFlights is a tool by Jani Patokallio individual developer. It can map flights around the world. A security vulnerability exists in openflights version 5234b5b, which stems from a cross-site scripting XSS vulnerability via php/trip.php...

6.1CVSS5.8AI score0.00263EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/29 12:0 a.m.7 views

PT-2024-29363

Name of the Vulnerable Software and Affected Versions OpenFlights commit 5234b5b Description The issue is a Cross-Site Scripting XSS vulnerability found in the php/trip.php file. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or...

6.1CVSS5.8AI score0.00263EPSS
SaveExploits1References7
CVE
CVE
added 2024/08/29 12:0 a.m.51 views

CVE-2024-41345

CVE-2024-41345 concerns the OpenFlights project. Multiple connected sources confirm that commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via the file php/trip.php . The CVE entry notes vulnerable behavior and provides no explicit details on affected versions beyond the commit reference...

6.1CVSS5.7AI score0.00263EPSS
SaveExploits1References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/08/23 2:53 a.m.4 views

SUSE CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

5.5CVSS6.5AI score0.0021EPSS
SaveExploits0References8
OSV
OSV
added 2024/08/22 2:15 a.m.1 views

DEBIAN-CVE-2022-48915

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from thermalgenlcmdtzgettrip if the thermal zone does not define one...

5.5CVSS5.1AI score0.0021EPSS
SaveExploits0References1
Rows per page
Query Builder