16 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-31018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters,...
UBUNTU-CVE-2026-31018
In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...
CVE-2026-31018
In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...
CVE-2025-31018
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FireDrum FireDrum Email Marketing firedrum-email-marketing allows Reflected XSS.This issue affects FireDrum Email Marketing: from n/a through = 1.64...
CVE-2025-31018
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FireDrum FireDrum Email Marketing firedrum-email-marketing allows Reflected XSS.This issue affects FireDrum Email Marketing: from n/a through = 1.64...
CVE-2025-31018
The CVE-2025-31018 entry describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FireDrum Email Marketing, affecting versions from n/a through 1.64. The vulnerability is categorized under Improper Neutralization of Input During Web Page Generation. CVSS v3.1 metrics...
CVE-2025-31018 WordPress FireDrum Email Marketing plugin <= 1.64 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FireDrum FireDrum Email Marketing firedrum-email-marketing allows Reflected XSS.This issue affects FireDrum Email Marketing: from n/a through = 1.64...
CVE-2025-31018 WordPress FireDrum Email Marketing plugin <= 1.64 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FireDrum FireDrum Email Marketing firedrum-email-marketing allows Reflected XSS.This issue affects FireDrum Email Marketing: from n/a through = 1.64...
WordPress FireDrum Email Marketing plugin <= 1.64 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin FireDrum Email Marketing versions = 1.64...
CVE-2023-31018
creationtimestamp| type| source ---|---|--- 2023-11-02 21:22:45+00:00| seen| https://t.me/cibsecurity/73466...
CVE-2023-31018
The CVE-2023-31018 issue affects the NVIDIA GPU Display Driver for Windows and Linux. A vulnerability in the kernel mode layer could allow an unprivileged local user to trigger a NULL-pointer dereference, potentially causing a denial of service. The connected data confirms this CVE is discussed a...
CVE-2022-31018
creationtimestamp| type| source ---|---|--- 2022-06-02 20:25:50+00:00| seen| https://t.me/cibsecurity/43733...
CVE-2022-31018 Denial of service binding form from JSON in Play Framework
Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the FormbindFromRequest method on a JSON request body or the...
CVE-2022-31018
CVE-2022-31018 affects Play Framework forms library (versions 2.8.3–2.8.15) for Java/Scala. The vulnerability is triggered when binding deeply nested JSON via Form.bindFromRequest or Form.bind on a JSON value, which may exhaust heap memory and crash the app (OutOfMemoryError) if run on the defaul...