CVE-2026-30958

creationtimestamp| type| source ---|---|--- 2026-03-12 17:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mguvvhi2ok2r...

CVE-2025-30958

Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites: from n/a through = 6.5.1...

CVE-2025-30958 WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites: from n/a through = 6.5.1...

CVE-2025-30958

CVE-2025-30958 concerns a Missing Authorization vulnerability in the WordPress plugin onOffice for WP-Websites , causing broken access control due to incorrectly configured access control security levels. Affected versions are listed as n/a through 5.7 (per CVE/NVD/Red Hat), with the issue enabli...

CVE-2025-30958 WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects onOffice for WP-Websites: from n/a through = 6.5.1...

WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin onOffice for WP-Websites versions = 6.5.1...

CVE-2023-30958

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2021-30958

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution...

CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter

A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0...

CVE-2023-30958

CVE-2023-30958: Foundry Frontend is affected by a DOM-based XSS vulnerability in the Developer mode dashboard (via redirect GET parameter) that could occur if CSP is bypassed. Root cause involves DOM XSS conditions when CSP protections are bypassed. The issue is resolved in Foundry Frontend 6.225...

CVE-2022-30958

creationtimestamp| type| source ---|---|--- 2022-05-17 18:27:40+00:00| seen| https://t.me/cibsecurity/42814...

CVE-2022-30958

A cross-site request forgery CSRF vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-30958

A cross-site request forgery CSRF vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-30958

CVE-2022-30958 is a CSRF vulnerability in Jenkins SSH Plugin 2.6.1 and earlier . The issue allows an attacker to cause a Jenkins instance to connect to an attacker‑specified SSH server using attacker‑specified credentials IDs that are obtained by other means, resulting in credentials stored in Je...

CVE-2022-30958

A cross-site request forgery CSRF vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

macOS 11.x < 11.6.2 (HT212979)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.2 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD file may lead ...

CVE-2021-30958

CVE-2021-30958 is an out-of-bounds read indicating arbitrary code execution when a malicious audio file is played. Affected products include macOS Big Sur 11.6.2 and Monterey 12.1, tvOS 15.2, iOS 15.2/iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Catalina. Root cause is improved input va...