1346 matches found
WordPress plugin NotFound azurecurve Floating Featured Image 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin NotFound azurecurve...
CVE-2024-29223
Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-31858
Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-31858
Out-of-bounds write for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel QuickAssist Technology 代码问题漏洞
Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A code issue vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0,...
Intel QuickAssist Technology 缓冲区错误漏洞
Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A buffer error vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0...
PT-2025-6638
Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology versions prior to 2.2.0 Description The issue is related to an out-of-bounds write that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versions...
CVE-2022-22111
In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged use...
CVE-2025-24966
reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary HTML code. In this scenario, the vulnerability exists in the "Add Target" functionality of the...
PT-2025-5642 · Wasmvm · Wasmvm
Name of the Vulnerable Software and Affected Versions: wasmvm versions 2.2.0 through 2.2.1 wasmvm versions 2.1.0 through 2.1.4 wasmvm versions 2.0.0 through 2.0.5 wasmvm versions prior to 1.5.8 Description: The issue can be used to slow down block production and requires a malicious contract...
PT-2025-4921 · Wc Wallet · Wc Wallet
Name of the Vulnerable Software and Affected Versions: WC Wallet versions n/a through 2.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. ACLs are used to define permissions f...
WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin WC Wallet versions = 2.2.0...
CVE-2025-22984
An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...
PT-2025-4757 · Icecms · Icecms
Name of the Vulnerable Software and Affected Versions: iceCMS version 2.2.0 Description: An access control issue in the component "/square/getAllSquare/circle" allows unauthenticated attackers to access sensitive information. Recommendations: For iceCMS version 2.2.0, consider restricting access ...
WordPress Neon Product Designer Plugin <= 2.2.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Neon Product Designer versions = 2.2.0...
Cross-site Scripting (XSS)
dcat/laravel-admin is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization in the /admin/articles/create endpoint in version 2.2.0-beta, which allows attackers to inject malicious scripts...
CVE-2025-22525
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...
PT-2025-1794 · WordPress · Smartemailing.Cz
Name of the Vulnerable Software and Affected Versions: SmartEmailing.cz plugin for WordPress versions prior to 2.2.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages via the...