CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11055 matches found

WPVulnDB•added 2022/08/15 12:00 a.m.•28 views

Visual Portfolio < 2.18.0 - Unauthenticated CSS Injection

The plugin does not have proper authorisation checks in some of its REST endpoints, allowing unauthenticated users to call them and inject arbitrary CSS in arbitrary saved layouts PoC The postid is the ID of a saved layout...

6.1CVSS3.7AI score0.00614EPSS

SaveExploits2Affected Software1

Patchstack•added 2022/08/15 12:00 a.m.•53 views

WordPress Visual Portfolio Plugin <= 2.17.1 - Unauthenticated CSS Injection vulnerability

Unauthenticated CSS Injection vulnerability discovered by Krzysztof Zając in Visual Portfolio plugin versions = 2.17.1 Solution Update the WordPress Visual Portfolio, Photo Gallery & Post Grid plugin to the latest available version at least 1.18.0...

6.1CVSS3.4AI score0.00614EPSS

SaveExploits2References1Affected Software1

GithubExploit•added 2022/08/12 5:18 a.m.•70 views

Exploit for CVE-2021-43908

vscode-rce-elec...

4.3CVSS7.1AI score0.02844EPSS

SaveExploits1

BDU FSTEC•added 2022/08/12 12:00 a.m.•24 views

Microsoft Visual Studio Code Execution

The vulnerability of the Microsoft Visual Studio software relates to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code by running the malicious file with the user’s permission...

10CVSS8.2AI score0.02101EPSS

SaveExploits0References4Affected Software3

Tenable Nessus•added 2022/08/12 12:00 a.m.•261 views

Security Updates for Microsoft Visual Studio Products (August 2022)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Fbx File parser Heap overflow Vulnerability. CVE-2022-35777, CVE-2022-35826 - Fbx File parser OOBW Vulnerability. CVE-2022-35825, CVE-2022-35827 Note that Nessus has not...

8.8CVSS8AI score0.02225EPSS

SaveExploits0References9

CNVD•added 2022/08/12 12:00 a.m.•99 views

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2022-67839)

Microsoft Visual Studio is a family of development tools from Microsoft Corporation USA and is a largely complete development toolset that includes most of the tools needed throughout the software lifecycle.Microsoft Visual Studio is vulnerable to remote code execution. An attacker could exploit...

3AI score0.02225EPSS

SaveExploits0Affected Software1