Поиск уязвимостей

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

ALT Linux

Количество 1 928

CVE-2019-20042

почти 7 лет назад

In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.

CVSS3: 6.1

EPSS: Низкий

CVE-2019-20042

почти 7 лет назад

In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function ...

CVSS3: 6.1

EPSS: Низкий

CVE-2019-20041

почти 7 лет назад

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring.

CVSS3: 9.8

EPSS: Низкий

CVE-2019-20041

почти 7 лет назад

CVSS3: 9.8

EPSS: Низкий

CVE-2019-20041

почти 7 лет назад

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 ...

CVSS3: 9.8

EPSS: Низкий

CVE-2019-17675

около 7 лет назад

WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.

CVSS3: 8.8

EPSS: Низкий

CVE-2019-17675

около 7 лет назад

WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.

CVSS3: 8.8

EPSS: Низкий

CVE-2019-17675

около 7 лет назад

WordPress before 5.2.4 does not properly consider type confusion durin ...

CVSS3: 8.8

EPSS: Низкий

CVE-2019-17674

около 7 лет назад

WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.

CVSS3: 5.4

EPSS: Низкий

CVE-2019-17674

около 7 лет назад

WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.

CVSS3: 5.4

EPSS: Низкий

CVE-2019-17674

около 7 лет назад

WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripti ...

CVSS3: 5.4

EPSS: Низкий

CVE-2019-17673

около 7 лет назад

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

CVSS3: 7.5

EPSS: Низкий

CVE-2019-17673

около 7 лет назад

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

CVSS3: 7.5

EPSS: Низкий

CVE-2019-17673

около 7 лет назад

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON ...

CVSS3: 7.5

EPSS: Низкий

CVE-2019-17672

около 7 лет назад

WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.

CVSS3: 6.1

EPSS: Низкий

CVE-2019-17672

около 7 лет назад

WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.

CVSS3: 6.1

EPSS: Низкий

CVE-2019-17672

около 7 лет назад

WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject ...

CVSS3: 6.1

EPSS: Низкий

CVE-2019-17671

около 7 лет назад

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.

CVSS3: 5.3

EPSS: Средний

CVE-2019-17671

около 7 лет назад

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.

CVSS3: 5.3

EPSS: Средний

CVE-2019-17671

около 7 лет назад

In WordPress before 5.2.4, unauthenticated viewing of certain content ...

CVSS3: 5.3

EPSS: Средний

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2019-20042 In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.	CVSS3: 6.1	3% Низкий	почти 7 лет назад
CVE-2019-20042 In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function ...	CVSS3: 6.1	3% Низкий	почти 7 лет назад
CVE-2019-20041 wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring.	CVSS3: 9.8	5% Низкий	почти 7 лет назад
CVE-2019-20041 wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript&colon; substring.	CVSS3: 9.8	5% Низкий	почти 7 лет назад
CVE-2019-20041 wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 ...	CVSS3: 9.8	5% Низкий	почти 7 лет назад
CVE-2019-17675 WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.	CVSS3: 8.8	3% Низкий	около 7 лет назад
CVE-2019-17675 WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.	CVSS3: 8.8	3% Низкий	около 7 лет назад
CVE-2019-17675 WordPress before 5.2.4 does not properly consider type confusion durin ...	CVSS3: 8.8	3% Низкий	около 7 лет назад
CVE-2019-17674 WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.	CVSS3: 5.4	2% Низкий	около 7 лет назад
CVE-2019-17674 WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.	CVSS3: 5.4	2% Низкий	около 7 лет назад
CVE-2019-17674 WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripti ...	CVSS3: 5.4	2% Низкий	около 7 лет назад
CVE-2019-17673 WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.	CVSS3: 7.5	4% Низкий	около 7 лет назад
CVE-2019-17673 WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.	CVSS3: 7.5	4% Низкий	около 7 лет назад
CVE-2019-17673 WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON ...	CVSS3: 7.5	4% Низкий	около 7 лет назад
CVE-2019-17672 WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.	CVSS3: 6.1	2% Низкий	около 7 лет назад
CVE-2019-17672 WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.	CVSS3: 6.1	2% Низкий	около 7 лет назад
CVE-2019-17672 WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject ...	CVSS3: 6.1	2% Низкий	около 7 лет назад
CVE-2019-17671 In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.	CVSS3: 5.3	37% Средний	около 7 лет назад
CVE-2019-17671 In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.	CVSS3: 5.3	37% Средний	около 7 лет назад
CVE-2019-17671 In WordPress before 5.2.4, unauthenticated viewing of certain content ...	CVSS3: 5.3	37% Средний	около 7 лет назад

Уязвимостей на страницу