16422 matches found
CVE-2025-66522 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field
A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...
CVE-2025-66522: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...
Foxit PDF Editor 安全漏洞
Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor that stems from the Common Name field in the Digital IDs feature not being properly cleaned or encoded, which could lead to a stored cross-site scripting attack...
PT-2025-52434
A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...
SUSE: Security Advisory (SUSE-SU-2025:4423-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2025:4488-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed modmd ACME unintended retry intervals bsc1254511 - CVE-2025-65082: Fixed CGI environment variable override bsc1254514 - CVE-2025-58098: Fixed Server Side Includes adding query string to exec cmd=... bsc1254512 -...
CVE-2025-64221
creationtimestamp| type| source ---|---|--- 2025-12-18 09:31:53+00:00| seen| https://gist.github.com/Darkcrai86/60dff2bdc60d38d2a1a34ebcc1a510e8...
CVE-2025-64188
Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through = 8.6.9...
CVE-2025-60180 WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...
CVE-2025-68432
creationtimestamp| type| source ---|---|--- 2025-12-18 01:31:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7zpqzonv2u 2025-12-18 03:04:21+00:00| seen| https://infosec.exchange/users/offseq/statuses/115738349369977264 2025-12-18 03:04:22+00:00| seen|...
CVE-2021-43163
creationtimestamp| type| source ---|---|--- 2025-12-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-12-18 2026-06-23 14:06:16+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81027123-38d0-4796-a9df-b0d9a6633a72 2026-06-30...
CVE-2025-34435
creationtimestamp| type| source ---|---|--- 2025-12-17 23:35:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7tag4nki2g...
Insertion of Sensitive Information into Externally-Accessible File or Directory
Overview @storybook/core-common is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory via the storybook build command. An attacker can access sensitive environment variables by...
31g-form-parser (>=1.0.1, <=1.0.126), @1024pix/storybook-ember (7.1.1) +198 more potentially affected by CVE-2025-68429 via @storybook/core-common (>=7.0.0, <=7.6.20)
@storybook/core-common NPM version =7.0.0, =1.0.1, =0.0.18, =2.0.5, =1.1.1, =0.0.1, =0.0.4, =0.38.0-rc.0, =0.0.0-dev-main.202308160724, =0.0.0-dev-main.202307180716, =0.0.0-dev.main.f64cee8 and more Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOKCORECOMMON-14470053...
@abovethefray/klaviyo-adobe-commerce-app-checkout-consent-dropin (>=0.0.1, <=1.0.0), @adobe-commerce/elsie (>=1.0.0-alpha04071347, <=2.0.0-alpha-20260514091936) +115 more potentially affected by CVE-2025-68429 via @storybook/core-common (>=8.0.0-alpha.0, <=8.6.14)
@storybook/core-common NPM version =8.0.0-alpha.0, =0.0.1, =1.0.0-alpha04071347, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =1.0.213-beta.38, =0.38.0, =0.41.1, =1.0.0, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.16.0, =1.17.0 and more Source cves: CVE-2025-68429 Source...
CLSA-2025-1765985737 libssh: Fix of 2 CVEs
CVE-2025-5351: fix double-free conditions - CVE-2025-8114: fix NULL pointer dereference...
BELL-CVE-2025-68318
Bulletin has no description...
BELL-CVE-2025-68183
Bulletin has no description...
CVE-2021-25082
creationtimestamp| type| source ---|---|--- 2025-12-17 02:07:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25082.yaml 2025-12-18 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36lkbax2f...
Fedora: Security Advisory (FEDORA-2025-0e41e63705)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...