Lucene search
K

37 matches found

Circl
Circl
added 2026/04/16 10:11 p.m.4 views

CVE-2026-25599

creationtimestamp| type| source ---|---|--- 2026-04-16 22:11:24+00:00| seen| https://www.cert.si/en/cve-2026-25599 2026-06-01 13:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mna5bhwura2j...

6.3CVSS5.8AI score0.00018EPSS
Exploits0References2
Circl
Circl
added 2025/03/23 10:28 a.m.9 views

CVE-2025-25599

creationtimestamp| type| source ---|---|--- 2025-03-23 10:28:26+00:00| seen| https://bsky.app/profile/r1cksec.bsky.social/post/3lkzztd36zs2f...

7AI score
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:4 p.m.6 views

CVE-2024-25599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through = 3.0.2...

7.1CVSS7.2AI score0.00264EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/01/16 12:16 p.m.222 views

Exploit for CVE-2025-25599

CVE-2025-25599 Details Bolt is an o...

7.8AI score
Exploits1
NVD
NVD
added 2024/03/28 7:15 a.m.10 views

CVE-2024-25599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through = 3.0.2...

7.1CVSS6.9AI score0.00264EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/28 6:52 a.m.17 views

CVE-2024-25599 WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through = 3.0.2...

7.1CVSS7.1AI score0.00264EPSS
Exploits0References1
CVE
CVE
added 2024/03/28 6:52 a.m.63 views

CVE-2024-25599

Technical details about CVE-2024-25599 are not provided in the connected documents. Please monitor for updates from vendors/security advisories.

7.1CVSS7.2AI score0.00264EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2024/03/26 12:0 a.m.7 views

WordPress Seriously Simple Podcasting Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Seriously Simple Podcasting Type Plugin Vulnerable versions = 3.0.2 Fixed in 3.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-25599 Patch priority Medium CVSS severity Medium 7.1 Developer Castos PSID 07063cdb0c71 Credits Rafie Muhammad Patchstack...

7.1CVSS6.5AI score0.00264EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/05/24 9:15 p.m.0 views

CVE-2023-25599

A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient validation for the testpresenter.php page. A successful exploit could allow an...

7.4CVSS7.2AI score
Exploits0References2
CVE
CVE
added 2023/05/24 12:0 a.m.55 views

CVE-2023-25599

The CVE-2023-25599 issue affects Mitel MiVoice Connect (conferencing component) and is caused by insufficient validation on the test_presenter.php page, enabling unauthenticated, reflected XSS. Affected versions include Mitel MiVoice Connect through 19.3 SP2 and 22.24.1500.0. Consequences stated ...

7.4CVSS7AI score0.00717EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/02/21 8:11 p.m.0 views

CVE-2022-25599

creationtimestamp| type| source ---|---|--- 2022-02-21 20:11:34+00:00| seen| https://t.me/cibsecurity/37867...

5.4CVSS4.6AI score0.00184EPSS
Exploits0References1
NVD
NVD
added 2022/02/21 6:15 p.m.7 views

CVE-2022-25599

Cross-Site Request Forgery CSRF vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin versions = 4.9.0...

5.4CVSS0.00184EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/02/21 5:49 p.m.6 views

CVE-2022-25599 WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin versions = 4.9.0...

5.4CVSS5.5AI score0.00184EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/02/21 5:49 p.m.14 views

CVE-2022-25599 WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin versions = 4.9.0...

5.4CVSS5.8AI score0.00184EPSS
Exploits0References2
CVE
CVE
added 2022/02/21 5:49 p.m.81 views

CVE-2022-25599

CVE-2022-25599 describes a CSRF vulnerability in the WordPress plugin Spiffy Calendar (versions ≤ 4.9.0) that allows an attacker to trigger event deletion due to missing token validation on the delete request. Multiple sources document the issue and confirm the affected component as the plugin’s ...

5.4CVSS4.7AI score0.00184EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2020:2790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.00109EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2020:2791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.00109EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2020:2788-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.12946EPSS
Exploits1References15
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2020:2786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.12946EPSS
Exploits1References14
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.38 views

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:2791-1)

This update for xen fixes the following issues : CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSRMISCENABLE was thrown bsc1176339,XSA-333 CVE-2020-25598: Added a missing unlock in XENMEMacquireresource error path bsc1176341,XSA-334 CVE-2020-25604: Fixed a...

7.8CVSS6.2AI score0.00109EPSS
Exploits0References32
Rows per page
Query Builder