13 matches found
CVE-2025-11825
creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:26+00:00| seen| Telegram/SsDVuiwrBfOdxxNqIsRSFjtYa3F8g76kp4UDScpJ2AJlPi0...
WordPress Playerzbr plugin <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Meta Field vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via URL Meta Field vulnerability discovered by Nabil Irawan in WordPress Plugin Playerzbr versions = 1.6...
CVE-2024-11825
CVE-2024-11825 affects the Broadstreet WordPress plugin. It is a Stored Cross-Site Scripting vulnerability in the zone parameter, present in all versions up to 1.50.3. Exploitation requires authenticated access at Contributor level or higher, enabling the attacker to inject arbitrary scripts that...
CVE-2020-11825
In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation...
CVE-2018-11825
CVE-2018-11825 is present in the Pixel security bulletin under Qualcomm components (WLAN host) with Moderate severity and a QC reference, but the Initial CVE entry explicitly states: “Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.” No public details, exploit info, or fix is provided in the su...
CVE-2019-11825
Cross-site scripting XSS vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2019-11825
CVE-2019-11825 is a cross-site scripting (XSS) vulnerability in Synology Calendar’s Event Editor, affecting versions before 2.3.0-0615. The underlying issue is insufficient validation of client data in the Web application, enabling remote attackers to inject arbitrary script via the title field. ...
Microsoft Office Remote Code Execution Vulnerability (Oct 2017) - Mac OS X
This host is missing an important security update for Microsoft Office 2016 on Mac OS X according to Microsoft security update October 2017 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
CVE-2017-11825
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-11825) affects Office 2016 (Click-to-Run) and Office 2016 for Mac. Root cause: improper handling of memory objects when processing files, enabling an attacker to execute arbitrary code in the current user’s security context via a spec...
CVE-2017-11825
Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...
Security Updates for Microsoft Office Products (October 2017)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - Microsoft has released an update for Microsoft Office that provides enhanced security as a defense-in-depth measure. - A remote code execution vulnerability exists in Microsoft...