Lucene search
K

8 matches found

CNVD
CNVD
added 2025/11/18 12:0 a.m.1 views

WordPress Qi Blocks plugin cross-site scripting vulnerability

WordPress Qi Blocks plugin is a WordPress block plugin developed by QodeInteractive, providing 48 free blocks and 33 premium blocks 81 in total, covering categories such as typography, infographics, form styles, content display, etc., and supporting highly customizable and flexible website buildi...

6.5CVSS6.1AI score0.00029EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-3475

Malware in sbrugna...

6.1CVSS6.1AI score0.00276EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2022-27878

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00703EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-0653

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00426EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/08/28 4:54 p.m.5 views

Moderate: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.1CVSS7.4AI score0.005EPSS
Exploits1References4
OSV
OSV
added 2025/07/10 5:15 p.m.2 views

CVE-2024-47252

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

7.5CVSS5.9AI score
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/07/10 4:55 p.m.2 views

CVE-2024-47252

Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to log variables...

7.5CVSS6.4AI score0.005EPSS
Exploits0
Cvelist
Cvelist
added 2022/03/14 2:41 p.m.10 views

CVE-2022-22735 Simple Quotation <= 1.3.2 - Subscriber+ SQL injection

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation and CSRF checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenticated users, such as subscriber to perform SQL injection attacks...

9.2AI score0.00703EPSS
Exploits2References1
Rows per page
Query Builder