Lucene search
+L

302 matches found

Cvelist
Cvelist
added 2024/11/09 12:53 p.m.22 views

CVE-2024-51689 WordPress CF7 WOW Styler plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows Reflected XSS.This issue affects CF7 WOW Styler: from n/a through = 1.6.8...

7.1CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 12:53 p.m.12 views

CVE-2024-51689 WordPress CF7 WOW Styler plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows Reflected XSS.This issue affects CF7 WOW Styler: from n/a through = 1.6.8...

7.1CVSS7.2AI score0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.6 views

WordPress plugin CF7 WOW Styler 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

7.1CVSS7.7AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.5 views

PT-2024-34835 · Unknown · Cf7 Wow Styler

Name of the Vulnerable Software and Affected Versions: CF7 WOW Styler versions 1.6.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited...

7.1CVSS6.8AI score0.00259EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/11/08 2:8 p.m.5 views

WordPress WoW Guild Armory Roster plugin <= 0.5.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WoW Guild Armory Roster versions = 0.5.5...

6.5CVSS6.1AI score0.00374EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.10 views

WordPress WoW Guild Armory Roster Plugin <= 0.5.5 is vulnerable to Cross Site Scripting (XSS)

Software WoW Guild Armory Roster Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51850 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 56dc451178b5 Credits SOPROBRO Required privilege...

6.5CVSS6.9AI score0.00374EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/04 8:30 a.m.5 views

WordPress CF7 WOW Styler plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin CF7 WOW Styler versions = 1.6.8...

7.1CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/04 12:0 a.m.23 views

WordPress CF7 WOW Styler Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)

Software CF7 WOW Styler Type Plugin Vulnerable versions = 1.6.8 Fixed in 1.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51689 Patch priority Medium CVSS severity Medium 7.1 Developer Tobias PSID 34b5f0049a13 Credits Le Ngoc Anh Required privilege...

7.1CVSS7AI score0.00259EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/10/21 12:15 p.m.2 views

DEBIAN-CVE-2024-47721

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89MACC2HFUNCREADWOWCAM to prevent out-of-bounds reading The handler of firmware C2H event RTW89MACC2HFUNCREADWOWCAM isn't implemented, but driver expects number of handlers is...

7.1CVSS6.1AI score0.00224EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.9 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to buffer overflows in the “thunk” buffer. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

7.8CVSS5.7AI score0.0338EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/10 5:15 p.m.4 views

CVE-2024-38237

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.0338EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/10 4:54 p.m.99 views

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

7.8CVSS8.6AI score0.0338EPSS
SaveExploits0References1Affected Software13
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.5 views

PT-2024-6264 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1

Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver affected versions not specified Description: The issue is related to a buffer overflow in the "heap" of the Kernel Streaming WOW Thunk Service Driver, which can allow an attacker to elevate their...

7.8CVSS6.8AI score0.0338EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2024/08/23 12:0 a.m.9 views

The vulnerability of the driver for the Windows operating system’s kernel-based streaming service WOW Thunk allows a hacker to escalate their privileges.

The vulnerability of the WOW Thunk kernel streaming service driver for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

9CVSS8.1AI score0.32347EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.12 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.9AI score0.00681EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2024/08/19 1:16 p.m.22 views

CVE-2024-43844

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: wow: fix GTK offload H2C skbuff issue We mistakenly put skb too large and that may exceed skb-end. Therefore, we fix it. skbuff: skboverpanic: text:ffffffffc09e9a9d len:416 put:204 head:ffff8fba04eca780...

5.5CVSS7.1AI score0.0018EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/18 2:15 p.m.4 views

CVE-2024-43346

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

5.4CVSS5.8AI score0.00246EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/18 2:15 p.m.32 views

CVE-2024-43346

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

6.5CVSS0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/18 1:18 p.m.25 views

CVE-2024-43346 WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...

6.5CVSS6.8AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/18 1:18 p.m.66 views

CVE-2024-43346

CVE-2024-43346 is a stored XSS vulnerability in the WordPress plugin “Modal Window” from Wow-Company. The issue affects Modal Window versions from n/a up to 6.0.3 and, per the vulnerability entry, has been patched (no exploit details provided in the sources). The vulnerability involves improper n...

6.5CVSS6.5AI score0.00246EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder