Lucene search
+L

181 matches found

CNVD
CNVD
added 2022/07/05 12:00 a.m.24 views

phplist Cross-Site Scripting Vulnerability (CNVD-2022-53002)

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that could be used by attackers to conduct cross-site scripting attacks...

6.1CVSS2.3AI score0.00748EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/05 12:00 a.m.24 views

phplist SQL Injection Vulnerability

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

9.8CVSS3.8AI score0.00964EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/07/05 12:00 a.m.31 views

phplist SQL Injection Vulnerability (CNVD-2022-53000)

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

7.2CVSS3.8AI score0.00868EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/21 12:00 a.m.14 views

Spring Cloud 安全漏洞

Spring Cloud is a microservices framework implemented in Spring Boot by the Spring community. A security vulnerability exists in Spring Cloud Function versions prior to 3.2.6, which stems from a caching issue in the Function Catalog component and is exploited by an attacker to cause a denial of...

7.5CVSS6.7AI score0.01395EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/10 10:15 a.m.11 views

CVE-2017-20030

A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Sending Campain. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.2CVSS5.5AI score0.00868EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/10 10:15 a.m.13 views

CVE-2017-20033

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send'";alert8 leads to cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading...

6.1CVSS4.5AI score0.00748EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/10 10:15 a.m.10 views

CVE-2017-20035

A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting Persistent. The attack may be initiated remotely. Upgrading to...

5.4CVSS4.4AI score0.00599EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/10 10:15 a.m.23 views

Cross site scripting

A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send'";alert8 leads to cross site scripting Reflected. It is possible to initiate the attack remotely. Upgrading...

4.3CVSS6.1AI score0.00748EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.13 views

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 has a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS5.2AI score0.00599EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.14 views

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS5.2AI score0.00599EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.14 views

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct cross-site scripting attacks...

5.4CVSS5.2AI score0.00599EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.13 views

phplist SQL注入漏洞

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

9.8CVSS5.9AI score0.00964EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.13 views

phplist 跨站脚本漏洞

phplist is a set of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that could be used by attackers to conduct cross-site scripting attacks...

6.1CVSS5.2AI score0.00748EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.12 views

phplist SQL注入漏洞

phplist is a suite of open source newsletter and email marketing software from the UK-based phplist. Version 3.2.6 of phplist contains a security vulnerability that can be exploited by attackers to conduct SQL injection attacks...

9.8CVSS5.9AI score0.21001EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/10 12:00 a.m.11 views

phplist 安全漏洞

phplist is an open source newsletter and email marketing software from phplist UK. phplist version 3.2.6 is vulnerable to information disclosure. An attacker could exploit the vulnerability by entering a password to sort the parameters, which could lead to information disclosure...

4CVSS5.6AI score0.00908EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/11/01 12:00 a.m.33 views

Python 3.2.x < 3.2.6, 3.3.x < 3.3.6, 3.4.x < 3.4.1 os.makedirs() not thread-safe (bpo-21082) - Linux

Python is prone to a local security bypass vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

3.3CVSS7.5AI score0.00356EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/06 5:47 p.m.57 views

GHSA-CQ6W-W5RJ-P9X8 Cross-site Scripting in Froala Editor

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS5.9AI score0.01224EPSS
SaveExploits0References4
ALT Linux
ALT Linux
added 2021/09/10 12:00 a.m.75 views

Security fix for the ALT Linux 10 package python3-module-django version 3.2.6-alt1

3.2.6-alt1 built Sept. 10, 2021 Alexey Shabalin in task 283535 Aug. 18, 2021 Alexey Shabalin - new version 3.2.6 - Rename dbbackend-psycopg2 to dbbackend-postgresql - Add dbbackend-oracle package - Fixes for the following security vulnerabilities: + CVE-2021-35042 Potential SQL injection via...

7.5CVSS10AI score0.44369EPSS
SaveExploits1
CNVD
CNVD
added 2021/04/06 12:00 a.m.76 views

Froala Editor Cross-Site Scripting Vulnerability

Froala Editor is a Web-based WYSIWYG rich text editor . A cross-site scripting vulnerability exists in the hyperlink creation module in Froala Editor version 3.2.6. The vulnerability can be exploited to conduct cross-site scripting attacks via specially crafted base64 strings...

6.1CVSS6AI score0.01224EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/05 1:15 p.m.44 views

CVE-2021-30109

Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...

6.1CVSS0.01224EPSS
SaveExploits0References1
Rows per page
Query Builder