Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:1 a.m.10 views

CVE-2023-25158

GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore...

9.8CVSS8.2AI score0.04653EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25158

Malicious code in bioql PyPI...

6.6AI score
Exploits0
NVD
NVD
added 2025/03/03 2:15 p.m.2 views

CVE-2025-25158

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antonio Sanchez Uncomplicated SEO uncomplicated-seo allows Reflected XSS.This issue affects Uncomplicated SEO: from n/a through = 1.2...

7.1CVSS0.00232EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.9 views

CVE-2025-25158 WordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antonio Sanchez Uncomplicated SEO uncomplicated-seo allows Reflected XSS.This issue affects Uncomplicated SEO: from n/a through = 1.2...

7.1CVSS0.00232EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.50 views

CVE-2025-25158

CVE-2025-25158 is a reflected Cross-Site Scripting vulnerability in WordPress Uncomplicated SEO plugin (versions

7.1CVSS5.9AI score0.00232EPSS
Exploits0References1
Circl
Circl
added 2024/01/12 8:41 a.m.1 views

CVE-2019-25158

creationtimestamp| type| source ---|---|--- 2024-01-12 08:41:40+00:00| seen| https://t.me/ctinow/167126...

9.8CVSS6.2AI score0.00692EPSS
Exploits0References1
OSV
OSV
added 2023/12/19 1:15 p.m.10 views

CVE-2019-25158

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...

9.8CVSS7.9AI score
Exploits0References4
CVE
CVE
added 2023/12/19 1:0 p.m.43 views

CVE-2019-25158

CVE-2019-25158 affects pedroetb tts-api up to version 2.1.4. The vulnerability is in the onSpeechDone function of app.js, enabling OS command injection. A fix is available in version 2.2.0, with the patch identified as 29d9c25415911ea2f8b6de247cb5c4607d13d434. Upgrading to 2.2.0 is recommended to...

9.8CVSS7.9AI score0.00692EPSS
Exploits0References4Affected Software1
Circl
Circl
added 2023/02/22 12:47 a.m.6 views

CVE-2023-25158

creationtimestamp| type| source ---|---|--- 2023-02-22 00:47:05+00:00| seen| https://t.me/cibsecurity/58646 2023-06-11 20:22:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4538 2024-07-11 05:37:18+00:00| published-proof-of-concept| https://t.me/LockBitRaasRansomware/43294...

9.8CVSS7.3AI score0.04653EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2022/04/28 12:0 a.m.56 views

Mitsubishi Electric FA Products Cleartext Storage of Sensitive Information (CVE-2022-25158)

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions and Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions allows a remote attacker to disclose or tamper with a file in which password hash is saved in cleartext. This...

9.1CVSS7.7AI score0.00323EPSS
Exploits0References4
CVE
CVE
added 2022/04/14 8:5 p.m.63 views

CVE-2020-25158

CVE-2020-25158 is a reflected XSS vulnerability affecting B. Braun SpaceCom, Battery Pack with Wi‑Fi, and Data module compactplus (SpaceCom v L81/U61 and earlier; compactplus A10/A11). The ICS advisory details multiple related issues (XSS and other CVEs) and confirms impact when these components ...

7.6CVSS6.2AI score0.00166EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2022/04/01 11:15 p.m.10 views

CVE-2022-25158

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

9.1CVSS0.00323EPSS
Exploits0References3
CVE
CVE
added 2022/04/01 10:18 p.m.75 views

CVE-2022-25158

The CVE-2022-25158 vulnerability affects Mitsubishi Electric MELSEC iQ-F series FX5U(C) and FX5UJ; iQ-R series (R00/01/02, R04/08/16/32/120(EN), R08/16/32/120SF/PCPU, RJ71 variants, etc.); Q/L series (Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU, Q03/04/06/13/26UDV/UDPVCPU, etc.); L series (L02/06...

9.1CVSS9.1AI score0.00323EPSS
Exploits0References3Affected Software1
ICS
ICS
added 2022/03/31 12:0 a.m.56 views

Mitsubishi Electric FA Products

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: FA products Vulnerabilities: Use of Password Hash Instead of Password for Authentication, Use of Weak Hash, Cleartext Storage of Sensitive Information, Authentication Bypass by Capture-replay...

9.1CVSS7.9AI score0.00739EPSS
Exploits0References4
CVE
CVE
added 2021/03/30 1:32 a.m.125 views

CVE-2021-25158

CVE-2021-25158 affects Aruba Instant IAPs. A remote arbitrary file read vulnerability exists in Aruba Instant versions: 6.5.x (6.5.4.18 and below); 8.3.x (8.3.0.14 and below); 8.5.x (8.5.0.11 and below); 8.6.x (8.6.0.7 and below); 8.7.x (8.7.1.1 and below). Siemens/SCALANCE context in related adv...

5.9CVSS5.8AI score0.04899EPSS
Exploits3References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2020/09/22 12:0 a.m.1 views

VulnCheck KEV: CVE-2023-25158

GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore...

9.8CVSS7.5AI score0.04653EPSS
Exploits0References1
Rows per page
Query Builder