CVE-2025-38565

In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...

CVE-2025-8719

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-8719

CVE-2025-8719 documents a Stored Cross-Site Scripting vulnerability in Translate This gTranslate Shortcode for WordPress, affecting all versions up to 1.0. The issue is triggered via the base_lang parameter and requires authentication at Contributor level or higher to inject scripts that execute ...

CVE-2025-8719 Translate This - Google Translate Web Element Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via base_lang Parameter

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-8719: Improper Neutralization of Input During Web Page Generation

The Translate This gTranslate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘baselang’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Translate This gTranslate Shortcode Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

MAL-2025-13917 Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)

The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...

Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...

MAL-2025-36819 Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

CVE-2024-42912: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

META-INF Kft. Email This Issue 安全漏洞

META-INF Kft. Email This Issue is an advanced email management plugin for Jira from Hungarian company META-INF Kft. A security vulnerability exists in versions prior to META-INF Kft. Email This Issue 9.13.0-GA, which stems from the injection of a specially crafted payload into the recipient field...

PT-2025-29836 · Meta Inf Kft. · Email This Issue

Name of the Vulnerable Software and Affected Versions: META-INF Kft. Email This Issue Data Center versions prior to 9.13.0-GA Description: A cross-site scripting XSS issue exists in META-INF Kft. Email This Issue Data Center. Attackers can execute arbitrary web scripts or HTML by injecting a...

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

CVE-2024-42912

A cross-site scripting XSS vulnerability in META-INF Kft. Email This Issue Data Center before 9.13.0-GA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the recipient field of an e-mail message...

CVE-2024-42912

A cross-site scripting (XSS) vulnerability exists in META-INF Kft. Email This Issue (Data Center) versions prior to 9.13.0-GA . The flaw allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the recipient field of an e-mail message. To remediate this issue,...

The vulnerability of the IFTTT Build Notifier plugin in the Jenkins automation server, related to the storage of keys in an exposed manner, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the IFTTT Build Notifier plugin in the Jenkins automation server lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Jenkins plugin IFTTT Build Notifier 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...

CVE-2024-56170

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI manifests are listings of relevant files that clients are supposed to verify. Assuming everything else is correct, the most recent version of a manifest should be prioritized over other versions, to prevent...