Lucene search
K

64 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в libsdl2, libsdl1.2

There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...

8.8CVSS7.5AI score0.00256EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 10:15 p.m.0 views

CVE-2025-64650

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files...

6.5CVSS5.7AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/08 9:51 p.m.1 views

CVE-2025-64650 IBM Storage Defender - Resiliency Service Information Disclosure

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files...

6.5CVSS6.2AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-4548

Malware in sbrugna...

7.5CVSS6.4AI score0.00147EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-0622

Malware in sbrugna...

7.5CVSS6.4AI score0.05073EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8400

Malicious code in bioql PyPI...

6.5CVSS9AI score0.00883EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.1 views

CVE-2024-56268

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through = 2.0.18...

6.5CVSS7.2AI score0.0024EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.2 views

CVE-2025-30768

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS0.00883EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:54 a.m.9 views

CVE-2025-30768 WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS0.00883EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:54 a.m.4 views

CVE-2025-30768 WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows Stored XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.18...

6.5CVSS7.3AI score0.00883EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/26 11:41 p.m.1 views

WordPress jAlbum Bridge plugin <= 2.0.18 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin jAlbum Bridge versions = 2.0.18...

6.5CVSS6.2AI score0.00883EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/02 1:15 p.m.6 views

CVE-2024-56268

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hookandhook Post Grid Elementor Addon post-grid-elementor-addon.This issue affects Post Grid Elementor Addon: from n/a through = 2.0.18...

6.5CVSS0.0024EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.1 views

WordPress plugin Post Grid Elementor Addon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS7.7AI score0.0024EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/30 11:45 a.m.12 views

CVE-2024-3935 Eclipse Mosquito: Double free vulnerability

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

6CVSS7AI score0.00385EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2024/10/30 11:41 a.m.15 views

CVE-2024-10525

In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its onsubscribe callback. This affects the mosquittosub and mosquittorr clients...

9.8CVSS7.3AI score0.17889EPSS
Exploits1
OSV
OSV
added 2024/10/28 1:15 p.m.2 views

CVE-2024-50502

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.18...

5.4CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.1 views

WordPress plugin Cozy Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00143EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.2 views

PT-2024-34279 · Unknown · Cozy Blocks

Name of the Vulnerable Software and Affected Versions: Cozy Blocks versions 2.0.18 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For version...

6.5CVSS5.6AI score0.00143EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.1 views

PT-2024-10972 · Openeuler · Openeuler Isulad

Name of the Vulnerable Software and Affected Versions: openEuler iSulad version 2.0.18-13 openEuler iSulad versions 2.1.4-1 through 2.1.4-2 Description: The issue is a Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux, allowing the leveraging of...

7CVSS6.8AI score0.00021EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.1 views

iSulad 安全漏洞

iSulad is a lightweight container engine open-sourced by src-openEuler. A security vulnerability exists in iSulad version 2.0.18-13 version 2.1.4-1 and version 2.1.4-2, which stems from the presence of a race condition issue...

7CVSS6.4AI score0.00021EPSS
Exploits0References8
Rows per page
Query Builder