Lucene search
+L

150651 matches found

vulnersOsv
vulnersOsv
•added 2025/05/19 4:52 p.m.•2 views

an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2025-47273 via setuptools (62.3.3)

setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/19 4:52 p.m.•2 views

an-website (>=22.7.6, <=22.7.22), pypony (>=1.0.0b1, <=1.0.0b2) +1 more potentially affected by CVE-2025-47273 via setuptools (63.1.0)

setuptools PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.6, =1.0.0b1, =1.0.0b2 - pytrack-lib 2.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/19 4:52 p.m.•3 views

an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2025-47273 via setuptools (63.4.2)

setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/19 4:52 p.m.•2 views

an-website (>=22.5.20, <=22.6.10), carml (>=22.7.0, <=22.7.1) +4 more potentially affected by CVE-2025-47273 via setuptools (62.3.2)

setuptools PYPI version 62.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.20, =22.7.0, =2.1.5a1, =0.0.0, =2.3.0rc3 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
Patchstack
Patchstack
•added 2025/05/19 4:33 p.m.•19 views

WordPress Visual Composer Website Builder plugin <= 45.11.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Visual Composer Website Builder versions = 45.11.0...

6.5CVSS6AI score0.0026EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•8 views

CVE-2025-48276: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through = 45.11.0...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•17 views

PT-2025-21982 · Unknown · Visual Composer Website Builder

Name of the Vulnerable Software and Affected Versions: Visual Composer Website Builder versions through 45.11.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS in Visual Composer Website...

6.5CVSS6AI score0.0026EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•20 views

WordPress plugin Visual Composer Website Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting...

6.5CVSS6.1AI score0.0026EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/05/17 4:15 p.m.•1 views

an-website (22.6.11), vgs-api-client (>=0.0.1.dev202206171951, <=0.0.45) potentially affected by CVE-2025-47273 via setuptools (62.3.3)

setuptools PYPI version 62.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website 22.6.11 - vgs-api-client =0.0.1.dev202206171951, =0.0.45 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/17 4:15 p.m.•2 views

an-website (>=22.7.6, <=22.7.22), pypony (>=1.0.0b1, <=1.0.0b2) +1 more potentially affected by CVE-2025-47273 via setuptools (63.1.0)

setuptools PYPI version 63.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.7.6, =1.0.0b1, =1.0.0b2 - pytrack-lib 2.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/17 4:15 p.m.•2 views

an-website (>=22.8.5, <=22.8.7), flarestack (2.4.5) +3 more potentially affected by CVE-2025-47273 via setuptools (63.4.1)

setuptools PYPI version 63.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.5, =0.1.1, =0.0.4, =0.1.5 - support-dh 0.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
vulnersOsv
vulnersOsv
•added 2025/05/17 4:15 p.m.•2 views

an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2025-47273 via setuptools (62.2.0)

setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.7AI score0.01592EPSS
SaveExploits5
osv_cve
osv_cve
•added 2025/05/15 7:29 p.m.•13 views

CVE-2025-47785 EMLOG SQL Injection Vulnerability

Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...

8.3CVSS8.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2025/05/15 7:29 p.m.•50 views

CVE-2025-47785 EMLOG SQL Injection Vulnerability

Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...

8.3CVSS0.00809EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/15 7:29 p.m.•14 views

CVE-2025-47785 EMLOG SQL Injection Vulnerability

Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...

8.3CVSS8.8AI score0.00809EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/05/14 5:15 p.m.•21 views

CVE-2025-44184

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the websiteimage, fname, lname, contact, username, and address parameters...

4.8CVSS5.8AI score0.00275EPSS
SaveExploits2References2
GithubExploit
GithubExploit
•added 2025/05/14 8:07 a.m.•127 views

Exploit for Cross-site Scripting in Mayurik Best_Employee_Management_System

Vulnerabilities in SourceCodester Best Employee Management Sys...

5.4CVSS7AI score0.00275EPSS
SaveExploits4
CNNVD
CNNVD
•added 2025/05/14 12:00 a.m.•21 views

SourceCodester Best Employee Management System 跨站脚本漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in version 1.0 of the SourceCodester Best Employee Management System due to an improper cleanup of the input of the parameters websiteimage, fname, lname,...

4.8CVSS6AI score0.00275EPSS
SaveExploits2References4
Circl
Circl
•added 2025/05/13 4:58 p.m.•7 views

CVE-2025-303837

creationtimestamp| type| source ---|---|--- 2025-05-13 16:58:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0155...

7.3AI score
SaveExploits0References1
Circl
Circl
•added 2025/05/13 4:58 p.m.•10 views

CVE-2025-303767

creationtimestamp| type| source ---|---|--- 2025-05-13 16:58:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0155...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder