https://vulnogram.org/ Most recent CVEs assigned by Cyber Security Works Pvt. Ltd. (csw). https://vulnogram.org/seaview/icons/csw.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2022-28291 https://vulnogram.org/CVE-2022-28291 Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials a… Medium Mon, 17 Oct 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-28290 https://vulnogram.org/CVE-2022-28290 Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request Mon, 25 Apr 2022 16:31:01 GMT https://vulnogram.org/CVE-2021-33853 https://vulnogram.org/CVE-2021-33853 A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a trusted website. As the vehicle for the attack, the application targets the users and not the application itself.… Wed, 16 Mar 2022 14:03:37 GMT https://vulnogram.org/CVE-2021-33852 https://vulnogram.org/CVE-2021-33852 A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Duplicate Title" text box executes whenever the user opens th… Wed, 09 Mar 2022 16:54:43 GMT https://vulnogram.org/CVE-2021-33851 https://vulnogram.org/CVE-2021-33851 A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Custom logo link" executes whenever the user opens the Settin… Wed, 09 Mar 2022 16:54:38 GMT https://vulnogram.org/CVE-2021-33850 https://vulnogram.org/CVE-2021-33850 There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page. Fri, 19 Nov 2021 15:52:43 GMT https://vulnogram.org/CVE-2021-33849 https://vulnogram.org/CVE-2021-33849 A Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s browser while the browser is connected to a trusted website. The attack targets your application's users and not the application itself while using your appl… Tue, 05 Oct 2021 21:43:47 GMT https://vulnogram.org/CVE-2020-29321 https://vulnogram.org/CVE-2020-29321 The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Fri, 04 Jun 2021 19:40:19 GMT https://vulnogram.org/CVE-2020-29324 https://vulnogram.org/CVE-2020-29324 The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Fri, 04 Jun 2021 19:39:57 GMT https://vulnogram.org/CVE-2020-29323 https://vulnogram.org/CVE-2020-29323 The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Fri, 04 Jun 2021 19:39:29 GMT https://vulnogram.org/CVE-2020-29322 https://vulnogram.org/CVE-2020-29322 The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Fri, 04 Jun 2021 19:39:00 GMT