Lucene search
+L

12346 matches found

Patchstack
Patchstack
added 2023/07/18 12:00 a.m.12 views

WordPress Mobile View for Responsive web design optimization (UX design) + Mobile Friendly Test Plugin < 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software Mobile View for Responsive web design optimization UX design + Mobile Friendly Test Type Plugin Vulnerable versions 1.2.8 Fixed in 1.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

6.3AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.9 views

WordPress WP Google Street View (with 360° virtual tour) & Google maps + Local SEO Plugin < 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Google Street View with 360° virtual tour & Google maps + Local SEO Type Plugin Vulnerable versions 1.1.1 Fixed in 1.1.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2023/07/18 12:00 a.m.12 views

WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severit...

6.4AI score0.00272EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/07/14 12:00 a.m.29 views

FreeBSD : electron22 -- multiple vulnerabilities (3446e45d-a51b-486f-9b0e-e4402d91fed6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3446e45d-a51b-486f-9b0e-e4402d91fed6 advisory. - Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...

8.8CVSS8.6AI score0.56192EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2023/07/12 12:31 p.m.42 views

Apache Airflow information disclosure vulnerability

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5CVSS6.7AI score0.01201EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2023/07/12 10:15 a.m.35 views

CVE-2022-46651

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5CVSS6.4AI score0.01201EPSS
SaveExploits0References2
OSV
OSV
added 2023/07/12 10:15 a.m.29 views

PYSEC-2023-103

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5CVSS6.7AI score0.01201EPSS
SaveExploits0References3
PyPA
PyPA
added 2023/07/12 10:15 a.m.9 views

PYSEC-2023-103

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5CVSS6.7AI score0.01201EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/12 9:17 a.m.38 views

CVE-2022-46651 Apache Airflow: Security vulnerability on AirFlow Connections

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5AI score0.01201EPSS
SaveExploits0References2
CVE
CVE
added 2023/07/12 9:17 a.m.88 views

CVE-2022-46651

Apache Airflow (versions before 2.6.3) is affected by an information-disclosure vulnerability in the Connection edit view. An unauthorized actor with access to Connection resources could potentially view sensitive data when updating a connection. Remediation: upgrade to Airflow 2.6.3 or later, wh...

6.5CVSS6.3AI score0.01201EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/12 9:17 a.m.28 views

CVE-2022-46651 Apache Airflow: Security vulnerability on AirFlow Connections

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the...

6.5AI score0.01201EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/12 12:00 a.m.12 views

Online Restaurant Management System SQL注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. A security vulnerability exists in Code-projects Online Restaurant Management System version 1.0, which allows an attacker to bypass the administration panel and view order history, add product...

9.8CVSS8.4AI score0.0089EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.18 views

The vulnerability of the Guest View component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Guest View component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00663EPSS
SaveExploits0References11Affected Software6
NVD
NVD
added 2023/07/10 4:15 p.m.17 views

CVE-2015-10119

A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPress. This issue affects the function actionadminnoticesactivation of the file view-all-posts-pages.php. The manipulation leads to cross site scripting. The attack may be initiat...

6.1CVSS4.5AI score0.00594EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/10 4:15 p.m.24 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPress. This issue affects the function actionadminnoticesactivation of the file view-all-posts-pages.php. The manipulation leads to cross site scripting. The attack may be initiat...

5.8CVSS6.5AI score0.00594EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/10 9:31 a.m.28 views

CVE-2015-10119 View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting

A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPress. This issue affects the function actionadminnoticesactivation of the file view-all-posts-pages.php. The manipulation leads to cross site scripting. The attack may be initiat...

4CVSS6.1AI score0.00594EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/10 9:31 a.m.39 views

CVE-2015-10119

CVE-2015-10119 affects the WordPress View All Posts Page Plugin up to version 0.9.0. The issue resides in the action_admin_notices_activation function and enables cross-site scripting, with remote initiation possible. A fix is available in version 0.9.1; apply upgrade to address the vulnerability...

6.1CVSS4.5AI score0.00594EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/07/10 12:00 a.m.7 views

VulnCheck KEV: CVE-2023-38831

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive...

7.8CVSS7AI score0.97894EPSS
SaveExploits49References1
CNNVD
CNNVD
added 2023/07/10 12:00 a.m.8 views

WordPress plugin view-all-posts-pages 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS4.2AI score0.00594EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/07/10 12:00 a.m.8 views

PT-2023-10297 · WordPress · View All Posts Page Plugin

Name of the Vulnerable Software and Affected Versions: View All Posts Page Plugin versions prior to 0.9.1 Description: A problematic issue has been found in the View All Posts Page Plugin on WordPress, affecting the action admin notices activation function of the file view-all-posts-pages.php. Th...

6.1CVSS6.5AI score0.00594EPSS
SaveExploits0References4
Rows per page
Query Builder