24 matches found
Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting
Zyxel ZyWall, USG, and UAG devices allow remote attackers to inject arbitrary web script or HTML via the errmsg parameter freetimefailed.cgi CGI program, aka reflective cross-site scripting. id: CVE-2019-12581 info: name: Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting author: n-thumann...
CVE-2026-12581
creationtimestamp| type| source ---|---|--- 2026-06-22 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116793647291083340 2026-06-22 12:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moutlrvs7i2t 2026-06-22 12:32:19+00:00| seen|...
CVE-2019-12581
A reflective Cross-site scripting XSS vulnerability in the freetimefailed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
WordPress Attachments Handler plugin <= 1.1.7 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Attachments Handler versions = 1.1.7...
CVE-2025-12581
creationtimestamp| type| source ---|---|--- 2025-12-20 10:55:01+00:00| seen| https://gist.github.com/Darkcrai86/c94910b4deb9048e6dcaf0f93b7eec63...
CVE-2024-12581
creationtimestamp| type| source ---|---|--- 2024-12-13 05:33:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113643879513000912 2024-12-13 08:14:25+00:00| seen| https://t.me/cvedetector/12830...
CVE-2024-12581 Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2024-12581
CVE-2024-12581 concerns the WordPress plugin Kadence Blocks (Gutenberg Blocks with AI by Kadence WP – Page Builder Features). Connected sources indicate the vulnerability is a Stored Cross-Site Scripting (XSS) in all versions up to 3.2.53, caused by insufficient input sanitization and output esca...
CVE-2024-12581 Kadence Blocks <= 3.2.53 - Authenticated (Admin+) Stored Cross-Site Scripting
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12581)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12581 advisory. - net/mlx5e: drop shorter ethernet frames Manjunath Patil Orabug: 36879157 CVE-2024-41090 CVE-2024-41091 - netfilter: ipset: Fix race between...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : phpMyAdmin vulnerabilities (USN-4843-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4843-1 advisory. Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly managed input in the form of passwords. An attacker could us...
0.app1 (=1.0.52), 0.edsql (>=1.0.49 <=1.0.50) +548 more potentially affected by CVE-2017-12581 via electron (>=0.1.2 <=1.6.7)
electron NPM version =0.1.2, =1.0.49, =1.0.49, =1.0.49, =1.0.0, =1.0.6, =4.0.23, =0.0.7, =0.0.73, =1.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2017-12581 Source advisory: OSV:GHSA-7FV9-M79R-J9X8...
CVE-2019-12581
A reflective Cross-site scripting XSS vulnerability in the freetimefailed.cgi CGI program in selected Zyxel ZyWall, USG, and UAG devices allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter...
CVE-2019-12581
The CVE-2019-12581 issue affects Zyxel ZyWall, USG, and UAG devices, where the free_time_failed.cgi CGI is vulnerable to a reflective XSS via the err_msg parameter. The Nuclei template specifies that remote attackers can inject arbitrary web script or HTML, with the attack context limited to the ...
openSUSE Security Update : phpMyAdmin (openSUSE-2019-490)
This update for phpMyAdmin fixes multiple issues. Security issues fixed : - CVE-2018-12613: File inclusion and remote code execution attack boo1098751 - CVE-2018-12581: XSS in Designer feature boo1098752 This update to version 4.8.2 also contains number of upstream bug fixes and improvements...
phpMyAdmin Cross-Site Scripting Vulnerability (PMASA-2018-3) - Windows
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2018:1806-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for phpMyAdmin (important)
This update for phpMyAdmin fixes multiple issues. Security issues fixed: CVE-2018-12613: File inclusion and remote code execution attack boo1098751 CVE-2018-12581: XSS in Designer feature boo1098752 This update to version 4.8.2 also contains number of upstream bug fixes and improvements...
CVE-2018-12581
An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted database name to trigger an XSS attack when that database is referenced from the Designer feature...