Lucene search
K

956 matches found

NVD
NVD
added 2025/01/22 3:15 p.m.3 views

CVE-2025-23948

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.This issue affects Background animation blocks: from n/a through = 2.1.5...

8.1CVSS0.01258EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/22 2:29 p.m.4 views

CVE-2025-23948 WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.This issue affects Background animation blocks: from n/a through = 2.1.5...

8.1CVSS7.2AI score0.01258EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.15 views

CVE-2025-23948 WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.This issue affects Background animation blocks: from n/a through = 2.1.5...

8.1CVSS0.01258EPSS
Exploits0References1
CVE
CVE
added 2025/01/22 2:29 p.m.45 views

CVE-2025-23948

CVE-2025-23948 – Background animation blocks (WordPress plugin) is an active vulnerability caused by improper control of filenames in PHP include/require statements, enabling unauthenticated PHP Local File Inclusion. Affected component: Background animation blocks; affected versions: up to 2.1.5 ...

8.1CVSS7.2AI score0.01258EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.1 views

WordPress plugin Background animation blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in th...

8.1CVSS8AI score0.01258EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/16 6:43 p.m.2 views

WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Background animation blocks versions = 2.1.5...

8.1CVSS7AI score0.01258EPSS
Exploits0Affected Software1
Redos
Redos
added 2025/01/14 12:0 a.m.6 views

ROS-20250114-09

Vulnerability in the animation control and synchronization handler on web pages of Mozilla Firefox browsers, Firefox ESR is related to the possibility of memory usage after its release. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by injecting it into...

9.8CVSS9.6AI score0.30808EPSS
Exploits1
OSV
OSV
added 2025/01/09 8:15 p.m.3 views

CVE-2024-13287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

5.4CVSS5.8AI score0.0023EPSS
Exploits0References1
NVD
NVD
added 2025/01/09 8:15 p.m.8 views

CVE-2024-13287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

5.4CVSS0.0023EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 8:13 p.m.7 views

CVE-2024-13287 Views SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

6.4AI score0.0023EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/09 8:13 p.m.9 views

CVE-2024-13287 Views SVG Animation - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-051

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Views SVG Animation allows Cross-Site Scripting XSS.This issue affects Views SVG Animation: from 0.0.0 before 1.0.1...

0.0023EPSS
Exploits0References1
CVE
CVE
added 2025/01/09 8:13 p.m.46 views

CVE-2024-13287

Summary (CVE-2024-13287): Drupal Views SVG Animation contains an XSS vulnerability due to improper neutralization of input during web page generation. Affected versions are 0.0.0 through 1.0.0; fixed in 1.0.1 and later. The issue is documented in multiple sources (SA-CONTRIB-2024-051, DRUPAL-SA-C...

5.4CVSS6.6AI score0.0023EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Views SVG Animation prior to version 1.0.1, which stems from improper input neutralization during page generation, resulting in a cross-site scriptin...

5.4CVSS6.1AI score0.0023EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/20 12:0 a.m.3 views

PT-2024-39664 · WordPress · Maintenance & Coming Soon Redirect Animation

Name of the Vulnerable Software and Affected Versions: Maintenance & Coming Soon Redirect Animation plugin for WordPress versions up to, and including, 2.1.3 Description: The issue is related to unauthorized modification of data due to a missing capability check on the wploti add whitelisted role...

4.3CVSS9.2AI score0.00135EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/12/20 12:0 a.m.1 views

WordPress plugin Maintenance & Coming Soon Redirect Animation 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An access control error vulnerability exists i...

4.3CVSS7.8AI score0.00135EPSS
Exploits0References3
NVD
NVD
added 2024/12/18 10:15 a.m.8 views

CVE-2024-12340

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00405EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/18 9:22 a.m.11 views

CVE-2024-12340 Animation Addons for Elementor <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template

The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with...

4.3CVSS0.00405EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/12/17 10:24 p.m.2 views

WordPress Animation Addons for Elementor plugin <= 1.1.6 - Authenticated (Contributor+) Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template vulnerability

Authenticated Contributor+ Sensitive Information Exposure via Content Slider and Tabs Widget Elementor Template vulnerability discovered by Ankit Patel in WordPress Plugin Animation Addons for Elementor versions = 1.1.6...

4.3CVSS7AI score0.00405EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.1 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to a countable loss of significance, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to a countable amount of significance loss. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00103EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.2 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to a countable loss of significance, allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to a countable amount of significance loss. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00191EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder