Lucene search
+L

4440 matches found

NVD
NVD
added 2024/06/21 1:15 p.m.36 views

CVE-2024-35757

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 5 Star Plugins Easy Age Verify allows Stored XSS.This issue affects Easy Age Verify: from n/a through 1.8.2...

5.9CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/21 12:43 p.m.25 views

CVE-2024-35757 WordPress Easy Age Verify plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 5 Star Plugins Easy Age Verify allows Stored XSS.This issue affects Easy Age Verify: from n/a through 1.8.2...

5.9CVSS6.8AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/21 12:43 p.m.36 views

CVE-2024-35757 WordPress Easy Age Verify plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in 5 Star Plugins Easy Age Verify allows Stored XSS.This issue affects Easy Age Verify: from n/a through 1.8.2...

5.9CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/21 12:43 p.m.63 views

CVE-2024-35757

CVE-2024-35757 affects the WordPress plugin Easy Age Verify (vulnerable from any n/a up to 1.8.2). The issue is Stored Cross-Site Scripting caused by improper neutralization during web page generation. Evidence from connected documents confirms the vulnerability type, affected product, and fixed ...

5.9CVSS5.7AI score0.0026EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/21 12:00 a.m.9 views

WordPress plugin Easy Age Verify cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

5.9CVSS6.2AI score0.0026EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/06/20 12:39 p.m.11 views

golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

A flaw was found in Go's crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to...

5.9CVSS7.3AI score0.00667EPSS
SaveExploits0References11
Patchstack
Patchstack
added 2024/06/17 9:15 a.m.10 views

WordPress Easy Age Verify plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Huynh Tien Si Patchstack Alliance in WordPress Plugin Easy Age Verify versions = 1.8.2...

5.9CVSS6.1AI score0.0026EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/06/17 12:00 a.m.24 views

WordPress Easy Age Verify Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Easy Age Verify Type Plugin Vulnerable versions = 1.8.2 Fixed in 1.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35757 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d39f735e9e41 Credits Huynh Tien Si Required privilege...

5.9CVSS6.6AI score0.0026EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
added 2024/06/10 6:41 p.m.6 views

golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

A flaw was found in Go's crypto/x509 standard library package. Verifying a certificate chain that contains a certificate with an unknown public key algorithm will cause a Certificate.Verify to panic. This issue affects all crypto/tls clients and servers that set Config.ClientAuth to...

5.9CVSS7.3AI score0.00667EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2024/06/10 6:41 p.m.9 views

requests: subsequent requests to the same host ignore cert verification

An incorrect control flow implementation vulnerability was found in Requests. If the first request in a session is made with verify=False, all subsequent requests to the same host will continue to ignore cert verification...

5.6CVSS7.1AI score0.0034EPSS
SaveExploits0References5
CNVD
CNVD
added 2024/06/04 12:00 a.m.13 views

IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2024-26083)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

5.5CVSS5.8AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/31 5:15 p.m.21 views

CVE-2024-35142

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418...

8.4CVSS8.1AI score0.00229EPSS
SaveExploits1References3
OSV
OSV
added 2024/05/31 5:15 p.m.6 views

CVE-2024-35142

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418...

7.8CVSS5.9AI score0.00229EPSS
SaveExploits1References3
NVD
NVD
added 2024/05/31 5:15 p.m.32 views

CVE-2024-35140

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416...

7.8CVSS7.6AI score0.00126EPSS
SaveExploits1References3
OSV
OSV
added 2024/05/31 5:15 p.m.12 views

CVE-2024-35140

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416...

7.8CVSS5.8AI score0.00126EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/05/31 4:57 p.m.30 views

CVE-2024-35142 IBM Security Verify Access privilege escalation

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418...

8.4CVSS6.6AI score0.00229EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/05/31 4:57 p.m.34 views

CVE-2024-35142 IBM Security Verify Access privilege escalation

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418...

8.4CVSS8.1AI score0.00229EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/05/31 4:53 p.m.46 views

CVE-2024-35140 IBM Security Verify Access privilege escalation

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416...

7.7CVSS7.6AI score0.00126EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/05/31 4:53 p.m.31 views

CVE-2024-35140 IBM Security Verify Access privilege escalation

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416...

7.7CVSS6.5AI score0.00126EPSS
SaveExploits1References2
NVD
NVD
added 2024/05/31 11:15 a.m.29 views

CVE-2024-22338

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978...

5.5CVSS3.7AI score0.00152EPSS
SaveExploits0References2
Rows per page
Query Builder