Security Bulletin: IBM Cloud Pak for Data is vulnerable to cross-site scripting (CVE-2025-0719)

Summary IBM Cloud Pak for Data is vulnerable to cross-site scripting. A reflected cross-site scripting XSS vulnerability has been identified on the /error endpoint, specifically with the 'error' parameter. This vulnerability allows an attacker to inject JavaScript code, which will be executed whe...

CVE-2025-0719

creationtimestamp| type| source ---|---|--- 2025-02-26 14:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5495 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-0719 IBM Cloud Pak for Data cross-site scripting

IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

CVE-2025-0719

CVE-2025-0719 affects IBM Cloud Pak for Data (versions 4.0.0–4.8.5 and 5.0.0). The IBM advisory describes a reflected cross-site scripting (XSS) vulnerability on the /error endpoint, where an unauthenticated attacker can inject JavaScript via the error parameter, potentially leading to credential...

CVE-2022-0719

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.3...

Qnap QTS Cross-site Scripting (CVE-2018-0719)

Cross-site Scripting XSS vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions ...

Photon OS 3.0: Linux PHSA-2024-3.0-0719

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0719. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-0719

creationtimestamp| type| source ---|---|--- 2024-03-18 20:26:45+00:00| seen| https://t.me/ctinow/210910...

CVE-2024-0719 Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting

The Tabs Shortcode and Widget WordPress plugin through 1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2024-0719 Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting

The Tabs Shortcode and Widget WordPress plugin through 1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

CVE-2024-0719

CVE-2024-0719 affects Tabs Shortcode and Widget for WordPress (

WordPress Tabs Shortcode and Widget Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)

Software Tabs Shortcode and Widget Type Plugin Vulnerable versions = 1.17 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0719 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b7bc2e300121 Credits Dmitrii Ignatyev...

RHSA-2024:0719

creationtimestamp| type| source ---|---|--- 2024-02-07 16:16:51+00:00| seen| https://t.me/ctinow/180787...

Moderate: Red Hat Security Advisory: Migration Toolkit for Runtimes security, bug fix and enhancement update

Migration Toolkit for Runtimes 1.2.4 release Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Important Photon OS Security Update - PHSA-2024-3.0-0719

Updates of 'libtiff', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

SUSE CVE-2011-0719

Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDSET macro, which allows remote attackers to cause a denial of service stack memory corruption, and infinite loop or daemon crash by opening a large number of...

CVE-2023-0719

creationtimestamp| type| source ---|---|--- 2023-02-08 02:23:27+00:00| seen| https://t.me/cibsecurity/57725...

WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Broken Access Control

Software Wicked Folders Type Plugin Vulnerable versions = 2.18.16 Fixed in 2.18.17 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0719 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 51b001d8b150 Credits Marco Wotschka Requir...

CVE-2023-0719

The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajaxsavesortorder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke...

CVE-2023-0719

Summary (CVE-2023-0719) : The Wicked Folders WordPress plugin (versions ≤ 2.18.16) is vulnerable to broken access control due to a missing capability check in the ajax_save_sort_order function. This allows authenticated users with subscriber-level permissions and above to invoke administrator-lev...