Lucene search
K

3267 matches found

Circl
Circl
added 2026/06/11 5:0 a.m.6 views

CVE-2026-42932

creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-02...

6.9CVSS5.3AI score0.00233EPSS
Exploits0References1
NVD
NVD
added 2026/06/09 7:17 p.m.8 views

CVE-2026-36770

Shenzhen Tenda Technology Co., Ltd Tenda USW3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00329EPSS
Exploits0References1
Lenovo
Lenovo
added 2026/06/09 3:1 p.m.19 views

NVIDIA GPU Display Driver and vGPU Software Vulnerabilities - Lenovo Support US

No description provided...

5.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/06/05 7:51 p.m.6 views

CVE-2025-65136

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter...

6.1CVSS5.5AI score0.00181EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:35 p.m.8 views

CVE-2026-5805

A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contactus.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available...

7.5CVSS7AI score0.00254EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:28 p.m.6 views

CVE-2026-4341

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'followustext' setting of the Mount widget in all versions up to, and including, 4.1.10. This is due to insufficient input sanitization and output escaping. Specifically, the...

6.4CVSS5.7AI score0.00362EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.8 views

CVE-2026-44212

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The...

9.3CVSS5.4AI score0.00331EPSS
Exploits0References1
OSV
OSV
added 2026/05/18 8:54 a.m.3 views

BIT-PRESTASHOP-2026-44212 PrestaShop: Stored XSS executable in customer service view

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The...

9.3CVSS5.8AI score0.00331EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/14 8:44 p.m.7 views

EUVD-2026-30481

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The...

9.3CVSS5.8AI score0.00331EPSS
Exploits0References1
CVE
CVE
added 2026/05/14 8:44 p.m.25 views

CVE-2026-44212

CVE-2026-44212 concerns PrestaShop's back-office Customer Service view. A stored XSS exists where an unauthenticated attacker can submit the public Contact Us form with a malicious email; the payload is stored in the database and executes when a back-office employee opens the affected customer th...

9.3CVSS5.8AI score0.00331EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 8:44 p.m.4 views

CVE-2026-44212

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The...

9.3CVSS5.8AI score0.00331EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/11 2:21 a.m.11 views

CVE-2025-65134

In manikandan580 School-management-system 1.0, a reflected cross-site scripting XSS vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter...

6.1CVSS5.6AI score0.00181EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2026/05/08 4:54 p.m.9 views

PrestaShop has a stored XSS executable in customer service view

Impact This is a stored Cross-site Scripting XSS vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The payload is stored in the database and executed when a back-office employee open...

9.3CVSS5.8AI score0.00331EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/07 12:31 p.m.11 views

EUVD-2026-28343

Cross-Site Request Forgery CSRF vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5...

4.3CVSS5.8AI score0.00095EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/24 2:42 p.m.2 views

CVE-2026-31620

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0 A malicious USB device with the TASCAM US-144MKII device id can have a configuration containing bInterfaceNumber=1 but no interface 0. USB configuration descriptors ar...

5.3AI score0.00196EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/04/14 6:30 p.m.3 views

EUVD-2025-209447

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter...

6.1CVSS5.8AI score0.00181EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/14 6:30 p.m.2 views

EUVD-2025-209445

In manikandan580 School-management-system 1.0, a reflected cross-site scripting XSS vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter...

5.7AI score0.00181EPSS
Exploits1References2
NVD
NVD
added 2026/04/14 4:16 p.m.2 views

CVE-2025-65134

In manikandan580 School-management-system 1.0, a reflected cross-site scripting XSS vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter...

6.1CVSS0.00181EPSS
Exploits1References1
NVD
NVD
added 2026/04/14 4:16 p.m.2 views

CVE-2025-65136

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter...

6.1CVSS0.00181EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/14 12:0 a.m.28 views

CVE-2025-65136

In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter...

0.00181EPSS
Exploits1References1
Rows per page
Query Builder