Lucene search
+L

2210 matches found

OSV
OSV
added 2025/12/30 4:15 p.m.5 views

UBUNTU-CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits0References7
CVE
CVE
added 2025/12/30 4:11 p.m.26 views

CVE-2025-67746

Composer 2.x is vulnerable to ANSI sequence injection in terminal output when downloading from remote sources. Affected: 2.2.x before 2.2.26 and 2.9.x before 2.9.3. Root cause: remote sources can inject ANSI control characters into command output, potentially causing mangled output and terminal D...

5.3CVSS6.3AI score0.00421EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2025/12/30 4:11 p.m.5 views

EUVD-2025-205815

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS6.2AI score0.00421EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/12/30 4:11 p.m.3 views

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS6.3AI score0.00421EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/12/30 4:11 p.m.45 views

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS0.00421EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/12/30 4:11 p.m.8 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS5.4AI score0.00421EPSS
SaveExploits0
OSV
OSV
added 2025/12/30 4:11 p.m.6 views

CVE-2025-67746 Composer vulnerable to ANSI sequence injection

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS6.6AI score0.00421EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2025/12/30 4:11 p.m.11 views

CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

5.3CVSS6.7AI score0.00421EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.6 views

Composer 注入漏洞

Composer is a Composer open source application. Provides a declaration, management and installation of PHP project dependencies. An injection vulnerability exists in Composer versions prior to 2.2.26 and prior to 2.9.3, which stems from the possibility that an attacker could inject ANSI control...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-67746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads...

5.3CVSS5.8AI score0.00421EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.8 views

CVE-2025-68598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.1.13...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.16 views

EUVD-2025-205237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.0.5...

5.4CVSS5.5AI score0.00135EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.11 views

CVE-2025-68598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.1.13...

6.5CVSS0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/24 1:16 p.m.9 views

CVE-2025-68574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.6 views

CVE-2025-68598 WordPress Page Builder: Live Composer plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.0.5...

5.6AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.12 views

CVE-2025-68598

CVE-2025-68598 refers to a vulnerability in Live Composer – Free WordPress Website Builder. The connected Wordfence entry details a Stored Cross-Site Scripting (XSS) flaw exploitable via the shortcode dslc_module_posts_output, with exploitation requiring an authenticated user (Contributor+). Affe...

6.5CVSS5.8AI score0.00135EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.36 views

CVE-2025-68598 WordPress Page Builder: Live Composer plugin <= 2.1.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.1.13...

6.5CVSS0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.4 views

CVE-2025-68574 WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows DOM-Based XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...

5.9CVSS6AI score0.00179EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.30 views

CVE-2025-68574

CVE-2025-68574 affects Innovs WPBakery Visual Composer WHMCS Elements (void-visual-whmcs-element) and is linked to versions

5.9CVSS6AI score0.00179EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.12 views

WordPress plugin WPBakery Visual Composer WHMCS Elements 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.9CVSS6.1AI score0.00179EPSS
SaveExploits0References1
Rows per page
Query Builder