Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the…
Opis źródłowy NVD · ENCVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to upload a crafted SVG that executes arbitrary JavaScript in the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode before printing them into an inline script block, allowing users with contributor-level access and above to inject…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki
The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,8 · EPSS 0,29 % · rekomendacja wg zapisanej polityki