Lucene search
+L

276 matches found

CNNVD
CNNVD
added 2024/05/21 12:00 a.m.11 views

Italtel Embrace 安全漏洞

Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4, which stems from a stored cross-site scripting XSS...

6.1CVSS5.6AI score0.0044EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/05/09 2:11 p.m.10 views

WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin CF7 WOW Styler versions = 1.6.4...

6.3CVSS7AI score0.00326EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/26 12:22 p.m.19 views

WordPress Meks Smart Social Widget plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Meks Smart Social Widget versions = 1.6.4...

5.9CVSS6.1AI score0.00341EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.12 views

WordPress plugin Meks Smart Social Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

5.9CVSS6.1AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/26 12:00 a.m.11 views

PT-2024-25449 · Unknown · Meks Smart Social Widget

Name of the Vulnerable Software and Affected Versions: Meks Smart Social Widget versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

5.9CVSS5.9AI score0.00341EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2024/04/26 12:00 a.m.19 views

WordPress Meks Smart Social Widget Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Meks Smart Social Widget Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33693 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 92d549959266 Credits Joshua Chan Required privileg...

5.9CVSS6.6AI score0.00341EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.10 views

WordPress plugin Filterable Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/26 12:00 a.m.17 views

PT-2024-29880 · Unknown · Sayful Islam Filterable Portfolio

Name of the Vulnerable Software and Affected Versions: Sayful Islam Filterable Portfolio versions 1.6.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can injec...

5.9CVSS5.2AI score0.00382EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.9 views

Italtel Embrace 安全漏洞

Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4 that could allow an unauthorized attacker to access...

7.5CVSS6.5AI score0.00665EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/19 12:00 a.m.11 views

PT-2024-24238 · Italtel · Italtel Embrace

Name of the Vulnerable Software and Affected Versions: Italtel Embrace version 1.6.4 Description: An issue was discovered where the web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem. Recommendations: For Italtel Embrace...

7.5CVSS7.2AI score0.00804EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/04/19 12:00 a.m.7 views

Italtel Embrace 安全漏洞

Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4, which stems from an arbitrary file read vulnerabili...

7.5CVSS6.8AI score0.00804EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/19 12:00 a.m.9 views

PT-2024-24243 · Italtel · Italtel Embrace

Name of the Vulnerable Software and Affected Versions: Italtel Embrace version 1.6.4 Description: An issue was discovered in the web application where it does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Recommendations: For Italtel Embrace version 1.6.4,...

7.5CVSS7.1AI score0.00665EPSS
SaveExploits1References2
OSV
OSV
added 2024/04/15 8:15 a.m.10 views

CVE-2024-32125

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4...

8.8CVSS5.8AI score0.00577EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/04/12 6:32 a.m.11 views

WordPress BA Book Everything plugin <= 1.6.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Thanh Nam Tran Patchstack Alliance in WordPress Plugin BA Book Everything versions = 1.6.4...

8.8CVSS8.1AI score0.00577EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/03/14 12:00 a.m.11 views

EyouCms Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.4, which stems from the existence of a PHP file inclusion vulnerability...

9.8CVSS6.8AI score0.00982EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
added 2023/12/04 12:00 a.m.8 views

VulnCheck KEV: CVE-2023-22478

KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds...

7.5CVSS7AI score0.03573EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/29 12:00 a.m.16 views

CVE-2023-48880

A stored cross-site scripting XSS vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu Name field at /login.php?m=admin&c=Index&a=changeTableVal&ajax=1&lang=cn...

5.6AI score0.00443EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/29 12:00 a.m.13 views

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

4.8CVSS5.8AI score0.00443EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/29 12:00 a.m.15 views

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms EyouCMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from a stored cross-site scripting XSS vulnerability in the Document Properties...

4.8CVSS5.7AI score0.00394EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/29 12:00 a.m.14 views

EyouCMS Security Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.4-UTF8-SP1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

4.8CVSS5.8AI score0.00384EPSS
SaveExploits1References1
Rows per page
Query Builder