Lucene search
+L

626 matches found

ATTACKERKB
ATTACKERKB
added 2023/10/18 11:15 p.m.5 views

CVE-2023-45909

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...

6.1CVSS5.8AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/18 12:00 a.m.10 views

ZZZCMS Input Validation Error Vulnerability

ZZZCMS is a content management system CMS. A security vulnerability exists in ZZZCMS version v2.2.0, which stems from the inclusion of an open redirection vulnerability...

6.1CVSS6.8AI score0.0028EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/16 11:15 a.m.7 views

CVE-2023-44985

Auth. contributo+ Stored Cross-Site Scripting XSS vulnerability in Cytech BuddyMeet plugin = 2.2.0 versions...

5.4CVSS7.3AI score0.00328EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/16 12:00 a.m.12 views

WordPress plugin EventON cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.8CVSS6AI score0.00402EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2023/10/03 9:15 p.m.8 views

CVE-2023-44974

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

9.8CVSS7.6AI score0.19064EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/28 2:15 p.m.9 views

CVE-2023-43872

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting XSS...

5.4CVSS5.8AI score0.00546EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/08/25 12:00 a.m.9 views

AdGuard DNS 安全漏洞

AdGuard DNS is a free, privacy-focused ad-blocking DNS server from AdGuard DNS. A security vulnerability exists in versions prior to AdGuard DNS 2.2 that stems from allowing an attacker to cause a denial of service DoS via a malformed UDP packet...

7.5CVSS7.3AI score0.00815EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/17 12:00 a.m.7 views

NTSC-CRT 输入验证错误漏洞

NTSC-CRT is an NTSC encode/decode in C89 by the LMP88959 individual developer. A security vulnerability exists in NTSC-CRT version 2.2.1 that stems from the presence of an integer overflow and out-of-bounds writes...

7.5CVSS7.3AI score0.00732EPSS
SaveExploits1References3
OSV
OSV
added 2023/06/26 7:15 a.m.24 views

UBUNTU-CVE-2023-22359

User enumeration in Checkmk =2.2.0p4 allows an authenticated attacker to enumerate usernames...

4.3CVSS5.8AI score0.00496EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/31 2:15 p.m.3 views

DEBIAN-CVE-2023-3012

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

7.8CVSS6.5AI score0.00375EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/31 2:15 p.m.8 views

DEBIAN-CVE-2023-3013

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2...

7.1CVSS6.2AI score0.00306EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/28 12:00 a.m.11 views

PT-2023-24226 · WordPress · Woodiscuz – Woocommerce Comments

Name of the Vulnerable Software and Affected Versions: WooDiscuz – WooCommerce Comments versions through 2.2.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows Stored XSS and affects the WooDiscuz – WooCommerce Comments plugin. It...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2023/05/22 6:15 p.m.6 views

CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

5.5CVSS6.8AI score0.00387EPSS
SaveExploits1References4
OSV
OSV
added 2023/05/22 6:15 p.m.4 views

DEBIAN-CVE-2023-2837

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2...

5.5CVSS6.7AI score0.00387EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/05/22 12:00 a.m.10 views

WordPress Plugin Crayon Syntax Highlighter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS7.8AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/05 12:00 a.m.10 views

PT-2023-20148 · Bumsys · Bumsys

Name of the Vulnerable Software and Affected Versions: bumsys versions prior to 2.2.0 Description: The issue concerns external control of file name or path in the GitHub repository unilogies/bumsys. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issu...

7.2CVSS7AI score0.29134EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/05 12:00 a.m.10 views

bumsys 跨站脚本漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...

5.4CVSS4.8AI score0.0037EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/04 12:00 a.m.10 views

Directus 资源管理错误漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in the Directus API version v.2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service via a large number of HTTP requests to the system...

6.5CVSS6.6AI score0.01079EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/02 2:15 a.m.10 views

CVE-2023-0228

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

8.8CVSS7.3AI score0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/26 12:00 a.m.9 views

PT-2023-16713 · Muyucms · Muyucms

Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: A vulnerability was found in MuYuCMS, affecting an unknown functionality of the file "/editor/index.php". The manipulation of the file path argument leads to relative path traversal. The attack can be launched...

8.8CVSS4.9AI score0.01117EPSS
SaveExploits1References7
Rows per page
Query Builder