Lucene search
+L

12856 matches found

CNVD
CNVD
•added 2021/08/05 12:00 a.m.•47 views

WordPress Steam Group Viewer plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Steam Group Viewer plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in WordPre...

5.4CVSS5.3AI score0.0062EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2021/08/03 12:00 a.m.•18 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to writing beyond the buffer limit in memory. Exploiting these vulnerabilities can allow a malicious actor to execut...

10CVSS8.5AI score0.04782EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/02 11:15 a.m.•18 views

CVE-2021-24476

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue...

5.4CVSS6.1AI score0.0062EPSS
SaveExploits2References1
Prion
Prion
•added 2021/08/02 11:15 a.m.•22 views

Cross site scripting

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue...

3.5CVSS5.3AI score0.0062EPSS
SaveExploits2References1Affected Software1
attackerkb
attackerkb
•added 2021/08/02 11:15 a.m.•10 views

CVE-2021-24476

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue...

5.4CVSS6AI score0.0062EPSS
SaveExploits2References2
CVE
CVE
•added 2021/08/02 10:32 a.m.•154 views

CVE-2021-24476

CVE-2021-24476 concerns the WordPress plugin Steam Group Viewer (v2.1 and earlier). The vulnerability arises because the plugin does not sanitize/escape the“三Steam Group Address” setting before outputting it on pages, enabling an authenticated Stored Cross-Site Scripting (XSS) issue. The impact s...

5.4CVSS5.2AI score0.0062EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/08/02 10:32 a.m.•38 views

CVE-2021-24476 Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue...

5.5AI score0.0062EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/08/02 12:00 a.m.•2 views

PT-2021-15999

Name of the Vulnerable Software and Affected Versions Steam Group Viewer WordPress plugin versions 2.1 and earlier Description The issue is related to an authenticated Stored Cross-Site Scripting problem. It occurs because the Steam Group Address settings are not properly sanitised or escaped...

5.4CVSS0.0062EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2021/08/02 12:00 a.m.•17 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Steam Group Viewer plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in WordPre...

5.4CVSS5.4AI score0.0062EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•7 views

CVE-2021-24476: Improper Neutralization of Input During Web Page Generation

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue...

5.4CVSS5.8AI score0.0062EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2021/07/30 12:00 a.m.•13 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat, as well as Adobe Acrobat Reader, are related to a memory reclamation bug. This bug allows attackers to execute arbitrary code in the context of the current user.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 are related to a memory reclamation error. Exploiting these vulnerabilities can allow an attacker to execute arbitra...

10CVSS8.3AI score0.14463EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2021/07/29 12:00 a.m.•67 views

(0Day) Microsoft 3D Viewer 3MF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.6AI score0.06771EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/07/27 12:00 a.m.•20 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

10CVSS8.2AI score0.06525EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/07/27 12:00 a.m.•17 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

10CVSS8.2AI score0.06525EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/07/27 12:00 a.m.•15 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

10CVSS8.2AI score0.0877EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/07/27 12:00 a.m.•14 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat, and Adobe Acrobat Reader, related to the issue of executing code outside the buffer in memory, allow attackers to execute arbitrary code in the context of the current user.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2019, and Adobe Acrobat Reader 2019 is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a...

9.8CVSS8.6AI score0.04416EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2021/07/27 12:00 a.m.•20 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute malicious code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to...

10CVSS8.2AI score0.06525EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/07/20 12:00 a.m.•63 views

gThumb Denial of Service Vulnerability

gThumb is a versatile image viewing tool that can manage, edit, and view images. gThumb versions prior to 3.10.1 are vulnerable to a denial of service. An attacker could exploit this vulnerability to crash the program via malformed JPEG images...

5.5CVSS4.7AI score0.00708EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/20 12:00 a.m.•28 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33134)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer is vulnerable to a...

6.5CVSS2.6AI score0.0084EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/07/16 12:00 a.m.•40 views

openSUSE: Security Advisory for claws-mail (openSUSE-SU-2021:1045-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.1AI score0.02614EPSS
SaveExploits0References2
Rows per page
Query Builder