Lucene search
K

6 matches found

CNNVD
CNNVD
added 2025/05/16 12:0 a.m.1 views

WordPress plugin Pinterest Automatic Pin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6AI score0.00168EPSS
Exploits0References3
OSV
OSV
added 2025/03/05 10:3 a.m.6 views

RHSA-2025:1908 Red Hat Security Advisory: OpenShift Container Platform 4.18.2 packages and security update

Bulletin has no description...

8.6CVSS7.2AI score0.0031EPSS
Exploits0References12
Cvelist
Cvelist
added 2024/03/06 7:7 p.m.33 views

CVE-2024-27304 pgx SQL Injection via Protocol Message Size Overflow

pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. T...

9.8CVSS10AI score0.01875EPSS
Exploits1References7
CVE
CVE
added 2024/03/06 6:28 p.m.771 views

CVE-2024-27289

CVE-2024-27289 affects the Go pgx PostgreSQL driver. Before 4.18.2, a SQL injection can occur when using the non-default simple protocol with a minus immediately before a numeric placeholder and a second placeholder for a string on the same line, with both values user-controlled. The issue is fix...

8.1CVSS8.3AI score0.00591EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.2 views

pgx security vulnerability

pgx is the PostgreSQL driver and toolkit for Go. A security vulnerability exists in pgx versions prior to 4.18.2 that stems from the presence of SQL injection...

8.1CVSS9.1AI score0.00591EPSS
Exploits0References5
OSV
OSV
added 2019/06/13 7:9 p.m.0 views

GHSA-49R3-3H96-RWJ6 Cross-Site Scripting in ids-enterprise

Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. The soho-dropdown component does not properly encode its output and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later...

6.1AI score
Exploits0References3
Rows per page
Query Builder