KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue affects JetProductTables: from n/a through 1.2.4.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issue affects SureCart: from n/a through 4.9.3.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected XSS.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.12.0.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27.
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing hostRules headers inside shared presets. Attackers can supply internal or externally sourced presets with unvalidated hostRules[].headers to inject…
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured.
Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mania: from n/a through 1.9.1.
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5.
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue affects JetProductTables: from n/a through 1.2.4. |
Obserwuj | 7,1 | 0,2 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issue affects SureCart: from n/a through 4.9.3. |
Obserwuj | 7,1 | 0,2 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected XSS.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12. |
Obserwuj | 7,1 | 0,19 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.12.0. |
Obserwuj | 7,1 | 0,19 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27. |
Obserwuj | 7,1 | 0,19 % | ||
| Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by… | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing hostRules headers inside shared presets. Attackers can supply internal or externally sourced presets with unvalidated hostRules[].headers to inject… |
Obserwuj | 7,1 | 0,19 % | ||
| A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured. |
Obserwuj | 7,1 | 0,19 % | ||
| Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control… | Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mania: from n/a through 1.9.1. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions. | Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. | Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. | Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions. | Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions. | Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions. | Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions. | Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions. | Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions. | Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions. | Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions. | Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. | Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions. | Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions. | Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5. |
Obserwuj | 7,1 | 0,18 % | ||
| Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. | Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. |
Obserwuj | 7,1 | 0,18 % | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows… | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0. |
Obserwuj | 7,1 | 0,18 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.