Skip to main content

Pinterest

5 CVEs product

Monthly

CVE-2024-28251 Mar 14, 00:15 HIGH PATCH This Week

Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Pinterest Querybook
NVD GitHub
CVSS 3.1
7.3
EPSS
0.2%
CVE-2024-27103 Feb 28, 18:15 MEDIUM PATCH This Month

Querybook is a Big Data Querying UI. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
CVSS 3.1
6.1
EPSS
0.4%
CVE-2024-26148 Feb 21, 23:15 MEDIUM PATCH This Month

Querybook is a user interface for querying big data. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-46151 Dec 06, 01:15 MEDIUM PATCH This Month

Querybook is an open source data querying UI. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
CVSS 3.1
6.1
EPSS
0.4%
CVE-2017-2171 May 22, 16:29 MEDIUM This Month

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Smtp Contact Form Captcha +49
NVD
CVSS 3.0
6.1
EPSS
0.2%
EPSS 0% CVSS 7.3
HIGH PATCH This Week

Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Pinterest Querybook
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

Querybook is a Big Data Querying UI. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Querybook is a user interface for querying big data. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM PATCH This Month

Querybook is an open source data querying UI. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Pinterest Querybook
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM This Month

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Google Smtp +51
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy