Lucene search
K

7 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/08 2:15 p.m.2 views

CVE-2022-2412

The Better Tag Cloud WordPress plugin through 0.99.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00238EPSS
Exploits2References2
CNVD
CNVD
added 2021/11/09 12:0 a.m.15 views

vfront cross-site scripting vulnerability

vfront is a free open source front-end for MySQL or PostgreSQL databases written in PHP and Javascript. vfront version 0.99.5 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the s parameter in...

6.1CVSS2.9AI score0.0024EPSS
Exploits1References1
OSV
OSV
added 2021/11/08 7:15 p.m.1 views

CVE-2021-39420

Multiple Cross Site Scripting XSS vulnerabilities exist in VFront 0.99.5 via the 1 s parameter in searchall.php and the 2 msg parameter in add.attach.php...

6.1CVSS6.4AI score
Exploits0References1
CNNVD
CNNVD
added 2021/11/08 12:0 a.m.4 views

VFront 跨站脚本漏洞

vfront is a free open source front-end for MySQL or PostgreSQL databases written in PHP and Javascript. vfront version 0.99.5 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the s parameter in...

6.1CVSS5.3AI score0.0024EPSS
Exploits1References2
CNVD
CNVD
added 2019/05/28 12:0 a.m.2 views

VFront Cross-Site Scripting Vulnerability

VFront is a set of PHP and Javascript written for MySQL or PostgreSQL database open source front-end management tools . A cross-site scripting vulnerability exists in Vfront version 0.99.5. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

6.1CVSS6.4AI score0.00234EPSS
Exploits2References1
RedHat Linux
RedHat Linux
added 2008/01/21 9:34 a.m.0 views

wireshark ANSI MAP flaws

Buffer overflow in the ANSI MAP dissector for Wireshark formerly Ethereal 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors...

10CVSS6.3AI score0.05068EPSS
Exploits0References4
Cent OS
Cent OS
added 2007/03/14 10:22 p.m.75 views

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0066 New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program...

5CVSS7AI score0.03158EPSS
Exploits2References9
Rows per page
Query Builder