Lucene search
+L

1269 matches found

NVD
NVD
added 2025/10/22 3:15 p.m.6 views

CVE-2025-49956

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through = 2.5...

7.1CVSS0.00233EPSS
Exploits0References1
NVD
NVD
added 2025/10/22 3:15 p.m.6 views

CVE-2025-49955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rajan Vijayan WP Smart Flexslider wp-smart-flexslider allows Reflected XSS.This issue affects WP Smart Flexslider: from n/a through = 2.5...

7.1CVSS0.00233EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.11 views

CVE-2025-52770 WordPress Hello Followers plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through = 2.5...

7.1CVSS0.00233EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.3 views

CVE-2025-52770 WordPress Hello Followers plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through = 2.5...

7.1CVSS6AI score0.00233EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.11 views

PT-2025-43216

Name of the Vulnerable Software and Affected Versions Rajan Vijayan WP Smart Flexslider versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Cross-site Scripting XSS. This allows an attacker to...

7.1CVSS6.3AI score0.00233EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/10/21 6:33 p.m.7 views

CVE-2025-47902

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5...

8.8CVSS7.7AI score0.00353EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/10/21 12:0 a.m.7 views

CVE-2025-60751

GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode...

7.5CVSS5.2AI score0.0215EPSS
Exploits3
CNNVD
CNNVD
added 2025/10/21 12:0 a.m.6 views

GeographicLib 安全漏洞

GeographicLib is a C language library from the GeographicLib open source. A security vulnerability exists in GeographicLib version 2.5, which originates from a buffer overflow in GeoConvert DMS::InternalDecode...

7.5CVSS7AI score0.0215EPSS
Exploits3References4
NVD
NVD
added 2025/10/20 6:15 p.m.7 views

CVE-2025-47901

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS0.01415EPSS
Exploits0References2
NVD
NVD
added 2025/10/20 6:15 p.m.7 views

CVE-2025-47900

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS0.01415EPSS
Exploits0References2
CVE
CVE
added 2025/10/20 5:52 p.m.11 views

CVE-2025-47902

CVE-2025-47902 affects Microchip Time Provider 4100 (before 2.5). Root cause is improper neutralization of special elements in SQL commands, enabling SQL injection. The CVSS vectors indicate high impact: CVSS 3.1 (NETWORK attack, high confidentiality, integrity, availability impact) and CVSS 4.0 ...

8.8CVSS7.3AI score0.00353EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/20 5:52 p.m.5 views

EUVD-2025-35090

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5...

7.1CVSS7.2AI score0.00353EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/20 5:48 p.m.5 views

EUVD-2025-35088

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS6.6AI score0.01415EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/20 5:43 p.m.7 views

CVE-2025-47900 RCE on backup configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS6.7AI score0.01415EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/20 5:43 p.m.15 views

CVE-2025-47900 RCE on backup configuration password

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5...

8.9CVSS0.01415EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/20 12:0 a.m.7 views

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 versions prior to 2.5, which stems from improper neutralization of special elements and could lead to OS command injection...

8.9CVSS6.8AI score0.01415EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/20 12:0 a.m.7 views

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 versions prior to 2.5, which stems from improper neutralization of special elements and could lead to OS command injection...

8.9CVSS6.8AI score0.01415EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/10/10 10:24 p.m.4 views

CVE-2025-9551

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5...

6.5CVSS5.8AI score0.00351EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2010-4736

Malware in sbrugna...

7.5CVSS6.4AI score0.0098EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2010-4737

Malware in sbrugna...

4.3CVSS6.4AI score0.01464EPSS
Exploits1References4
Rows per page
Query Builder