Lucene search
+L

1262 matches found

Openbugbounty
Openbugbounty
added 2023/05/27 8:41 a.m.11 views

white-conveyors.com Cross Site Scripting vulnerability OBB-3364674

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CNVD
CNVD
added 2023/05/19 12:00 a.m.32 views

Arbitrary File Read Vulnerability in M7160DW of Zhuhai Pento Printing Technology Co.

The M7160DW is a black-and-white laser MFP that supports printing, copying and scanning functions with USB, wired network, LAN and WIFI connectivity. The M7160DW of Zhuhai Pento Printing Technology Co., Ltd. suffers from an arbitrary file read vulnerability, which can be exploited by an attacker ...

6.7AI score
SaveExploits0
OSV
OSV
added 2023/05/15 12:15 p.m.7 views

CVE-2023-23683

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ozan Canakli White Label Branding for Elementor Page Builder plugin = 1.0.2 versions...

4.8CVSS7.3AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/15 12:00 a.m.5 views

WordPress plugin White Label Branding for Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.3AI score0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/09 8:15 a.m.21 views

CVE-2023-23863

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/09 8:15 a.m.18 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/09 7:38 a.m.29 views

CVE-2023-23863 WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/09 7:38 a.m.12 views

CVE-2023-23863 WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin = 2.0.22 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2023/05/08 9:52 a.m.120 views

CVE-2023-24540

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be...

8.1CVSS8.8AI score0.0156EPSS
SaveExploits0References5
NVD
NVD
added 2023/05/01 4:15 p.m.28 views

CVE-2023-29635

File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...

9.8CVSS9.7AI score0.01054EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/01 12:00 a.m.57 views

CVE-2023-29635

CVE-2023-29635 affects Antabot White-Jotter v0.2.2. The issue is a file upload vulnerability where an attacker can supply a crafted file to the coversUpload function, enabling remote code execution. The CVSS 3.1 metrics indicate NETWORK attack vector, NONE privileges required, and high impact to ...

9.8CVSS9.5AI score0.01054EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/01 12:00 a.m.34 views

CVE-2023-29635

File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...

9.9AI score0.01054EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/01 12:00 a.m.9 views

White-Jotter 代码问题漏洞

White-Jotter is Antabot individual developers of a front-end and back-end separation of the use of Vue + Spring Boot development project , comes with a full set of development tutorials . Antabot White-Jotter v0.2.2 version of a security vulnerability , the vulnerability stems from the existence ...

9.8CVSS8.5AI score0.01054EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/05/01 12:00 a.m.12 views

CVE-2023-29635

File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...

9.7AI score0.01054EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/05/01 12:00 a.m.10 views

PT-2023-22344 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter version 0.2.2 Description: The issue allows remote attackers to execute malicious code via the file parameter to the coversUpload function. This enables attackers to upload malicious files, potentially leading to code...

9.8CVSS7.6AI score0.01054EPSS
SaveExploits0References7
The Coalfire Blog
The Coalfire Blog
added 2023/04/26 8:56 p.m.17 views

White House cyber strategy: leadership is now accountable

The National Cybersecurity Strategy represents one of the most significant market-driving forces in the history of IT. It ushers in a new era of standards, requirements, and best practices that will define how our economy works and how buyers interact with sellers for decades to come...

6.9AI score
SaveExploits0
NVD
NVD
added 2023/04/24 9:15 a.m.27 views

CVE-2023-22577

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...

9.8CVSS9.6AI score0.00744EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/24 9:15 a.m.7 views

CVE-2023-22581

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...

9.8CVSS5.8AI score0.00706EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/24 9:15 a.m.11 views

CVE-2023-22577

Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...

7.5CVSS7.1AI score0.00744EPSS
SaveExploits0References3
NVD
NVD
added 2023/04/24 9:15 a.m.26 views

CVE-2023-22581

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...

9.8CVSS9.7AI score0.00706EPSS
SaveExploits0References3
Rows per page
Query Builder