EUVD-2018-20846

Malware in sbrugna...

EUVD-2018-20753

Malware in sbrugna...

EUVD-2018-20659

Malware in sbrugna...

EUVD-2018-10851

Malware in sbrugna...

EUVD-2023-1383

Malicious code in bioql PyPI...

CVE-2023-2034

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14...

CVE-2021-21656

Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

Linux Distros Unpatched Vulnerability : CVE-2018-9055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpcfirstone in libjasper/jpc/jpcmath.c. CVE-2018-9055 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2018-9252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JasPer 2.0.14 allows denial of service via a reachable assertion in the function jpcabstorelstepsize in libjasper/jpc/jpcenc.c. CVE-2018-9252 Note that Nessus...

PT-2025-3238 · Envato · Envato Elements

Name of the Vulnerable Software and Affected Versions: Envato Elements versions n/a through 2.0.14 Description: The issue is related to a Server-Side Request Forgery SSRF problem, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...

WordPress Envato Elements plugin <= 2.0.14 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Envato Elements versions = 2.0.14...

PT-2024-12997 · WordPress · Click To Tweet

Name of the Vulnerable Software and Affected Versions: Click To Tweet versions through 2.0.14 Description: The issue affects the Click To Tweet plugin, allowing exploitation of incorrectly configured access control security levels due to a missing authorization vulnerability. This results in brok...

CVE-2024-53802 WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FuturioWP Futurio Extra allows Stored XSS.This issue affects Futurio Extra: from n/a through 2.0.14...

CVE-2024-53802

CVE-2024-53802 is a stored Cross-Site Scripting vulnerability in the Futurio Extra WordPress plugin. Public details indicate improper input handling during web page generation, exploitable via the header_size tag, affecting Futurio Extra versions from unspecified earlier releases up to and includ...

WordPress Futurio Extra plugin <= 2.0.14 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Futurio Extra versions = 2.0.14...

WordPress Plugin PlusCaptcha Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-10304 · Unknown · Pluscaptcha Plugin

Name of the Vulnerable Software and Affected Versions: PlusCaptcha Plugin versions up to 2.0.6 Description: A vulnerability was found in the PlusCaptcha Plugin, which is classified as problematic. The issue affects some unknown functionality and leads to cross-site scripting. The attack can be...

Advisory ROSA-SA-2023-2307

Software: jasper 2.0.14-5 OS: ROSA Virtualization 2.1 packageevrstring: jasper-2.0.14-5.rv3.src.rpm CVE-ID: CVE-2020-27828 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Special input provided by an attacker in jasper could cause an arbitrary write outside of the allowed range. This could potentially...

CVE-2023-41856

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...

PT-2023-17430 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.14 Description: The issue concerns the unrestricted upload of files with dangerous types in the GitHub repository froxlor/froxlor. Specifically, image files uploaded were not properly validated, which could resul...