Lucene search
+L

912 matches found

RedhatCVE
RedhatCVE
added 2025/04/03 9:40 a.m.16 views

CVE-2025-31001

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

7.5CVSS7.2AI score0.00476EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.30 views

CVE-2025-30797 WordPress Greek Multi Tool – Fix peralinks, accents, auto create menus and more plugin <= 2.3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more greek-multi-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greek Multi Tool – Fix peralinks, accents, auto create menus and more...

7.5CVSS0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.8 views

WordPress plugin Greek Multi Tool 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS8.5AI score0.00468EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/03/31 2:01 p.m.8 views

WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Prissy in WordPress Plugin themesflat-addons-for-elementor versions = 2.3.1...

6.5CVSS6.1AI score0.00256EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/03/20 12:32 p.m.9 views

GHSA-4VMG-RW8F-92F9 Withdrawn Advisory: PyTorch deserialization vulnerability

Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references. Original Description A deserialization vulnerability exists in the Pytorch RPC framework torch.distributed.rpc in pytorch/pytorch...

9.8CVSS7.1AI score
SaveExploits0References4
Snyk
Snyk
added 2025/03/11 7:24 p.m.9 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsync function method, which does not verify the identity of the calling TUser, allowing an attacker to escalate privileges to that of another user. Remediation Upgrade...

8.3CVSS7.2AI score0.00968EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/03/06 12:02 a.m.7 views

WordPress Greek Multi Tool plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin Greek Multi Tool – Fix peralinks, accents, auto create menus and more versions = 2.3.1...

5.7AI score
SaveExploits0References1Affected Software1
Apple
Apple
added 2025/02/10 12:00 a.m.18 views

About the security content of visionOS 2.3.1

About the security content of visionOS 2.3.1 This document describes the security content of visionOS 2.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

4.2CVSS6.9AI score0.01033EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 2:53 p.m.14 views

CVE-2020-15214

In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a write out bounds / segmentation fault if the segment ids are not sorted. Code assumes that the segment ids are in increasing order, using the last element of the tensor holding them to determine the...

8.1CVSS6.5AI score0.00671EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 7:52 a.m.15 views

CVE-2024-41950

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja...

7.5CVSS7.3AI score0.01171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:57 a.m.9 views

CVE-2024-32582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through 2.3.1...

7.1CVSS5.2AI score0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/31 8:24 a.m.6 views

CVE-2025-24635 WordPress Paytm – Donation Plugin plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paytm Paytm Payment Donation allows Reflected XSS. This issue affects Paytm Payment Donation: from n/a through 2.3.1...

7.1CVSS7AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/31 8:24 a.m.29 views

CVE-2025-24635 WordPress Paytm – Donation Plugin plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Reflected XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.1...

7.1CVSS0.00255EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/31 6:00 a.m.84 views

CVE-2024-13218

CVE-2024-13218 - Fast Tube WordPress plugin : The Fast Tube WordPress plugin (versions up to 2.3.1) is vulnerable to a Reflected Cross-Site Scripting (XSS) due to improper sanitization/escaping of a parameter before it is output on the page. This could allow an attacker to target high-privilege u...

6.1CVSS5.8AI score0.00357EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/31 12:00 a.m.11 views

PT-2025-5463 · Paytm · Paytm Payment Donation

Name of the Vulnerable Software and Affected Versions: Paytm Payment Donation versions n/a through 2.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

7.1CVSS7.1AI score0.00255EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.37 views

CVE-2025-23770 WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...

7.1CVSS0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.6 views

WordPress plugin Fast Tube 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.6AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.7 views

PT-2025-5078 · Unknown · Notfound Fast Tube

Name of the Vulnerable Software and Affected Versions: NotFound Fast Tube versions prior to 2.3.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations: For versions prior...

7.1CVSS9.4AI score0.00281EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/01/05 6:27 p.m.7 views

WordPress Paytm – Donation Plugin plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Paytm Payment Donation versions = 2.3.1...

7.1CVSS6.1AI score0.00255EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/31 11:15 a.m.25 views

CVE-2024-56256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through = 2.3.1...

5.9CVSS0.00236EPSS
SaveExploits0References1
Rows per page
Query Builder