Lucene search
K

7 matches found

Patchstack
Patchstack
added 2025/02/03 10:16 p.m.3 views

WordPress BP Better Messages plugin <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Bassem Essam in WordPress Plugin BP Better Messages versions = 2.6.9...

6.4CVSS5.8AI score0.00284EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/12/02 11:38 p.m.2 views

WordPress Scratch & Win – Giveaways and Contests plugin <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Scratch & Win – Giveaways and Contests versions = 2.6.9...

6.4CVSS5.7AI score0.00283EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.2 views

WordPress plugin Jeg Elementor Kit 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...

4.3CVSS7.9AI score0.00392EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/18 12:0 a.m.3 views

WordPress plugin Modula 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS5.8AI score0.00454EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.3 views

Apache Dubbo代码问题漏洞

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A deserialization vulnerability...

9.8CVSS6.1AI score0.04197EPSS
Exploits0References2
NVD
NVD
added 2019/03/14 10:29 p.m.15 views

CVE-2019-3816

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman serve...

7.5CVSS7.4AI score0.14739EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2008/04/10 12:0 a.m.1 views

PT-2008-1008 · Rsync · Rsync

Name of the Vulnerable Software and Affected Versions: rsync versions 2.6.9 through 3.0.1 Description: The issue affects the rsync package, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. A buffer...

7.5CVSS7.5AI score0.04985EPSS
Exploits1References33
Rows per page
Query Builder