Lucene search
+L

65 matches found

NVD
NVD
added yesterday4 views

CVE-2026-74015

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

9.3CVSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.8 views

Astra Linux – Vulnerability in libsdl2, libsdl1.2

There is a heap overflow issue in the video/SDLpixels.c file in SDL Simple DirectMedia Layer versions 2.x to 2.0.18. By creating a malicious .BMP file, an attacker can cause the application using this library to crash, result in a denial of service, or lead to code execution...

8.8CVSS7AI score0.02055EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/08 10:15 p.m.8 views

CVE-2025-64650

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files...

6.5CVSS5.7AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/08 9:51 p.m.5 views

CVE-2025-64650 IBM Storage Defender - Resiliency Service Information Disclosure

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files...

6.5CVSS6.2AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-0622

Malware in sbrugna...

7.5CVSS6.4AI score0.02778EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-4548

Malware in sbrugna...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-8400

Malicious code in bioql PyPI...

6.5CVSS9AI score0.0034EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.9 views

CVE-2024-56268

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through = 2.0.18...

6.5CVSS7.2AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.6 views

CVE-2025-30768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS0.0034EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:54 a.m.4 views

CVE-2025-30768 WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS7.3AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:54 a.m.20 views

CVE-2025-30768 WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS0.0034EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/26 11:41 p.m.8 views

WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin jAlbum Bridge versions = 2.0.18...

6.5CVSS6.2AI score0.0034EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/02 1:15 p.m.23 views

CVE-2024-56268

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through = 2.0.18...

6.5CVSS0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.11 views

WordPress plugin Post Grid Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS7.7AI score0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/30 11:45 a.m.15 views

CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

6CVSS7AI score0.00749EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2024/10/30 11:41 a.m.18 views

CVE-2024-10525

In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its onsubscribe callback. This affects the mosquittosub and mosquittorr clients...

9.8CVSS7.3AI score0.58546EPSS
SaveExploits1
OSV
OSV
added 2024/10/28 1:15 p.m.8 views

CVE-2024-50502

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.18...

5.4CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.12 views

PT-2024-34279 · Unknown · Cozy Blocks

Name of the Vulnerable Software and Affected Versions: Cozy Blocks versions 2.0.18 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For version...

6.5CVSS5.6AI score0.00246EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.9 views

WordPress plugin Cozy Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.26 views

iSulad 安全漏洞

iSulad is a lightweight container engine open-sourced by src-openEuler. A security vulnerability exists in iSulad version 2.0.18-13 version 2.1.4-1 and version 2.1.4-2, which stems from the presence of a race condition issue...

7CVSS6.4AI score0.00146EPSS
SaveExploits0References8
Rows per page
Query Builder