Lucene search
+L

2046 matches found

AlpineLinux
AlpineLinux
•added 2025/04/02 10:18 p.m.•25 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS7.3AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/02 10:18 p.m.•29 views

CVE-2025-3154 Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/02 10:18 p.m.•64 views

CVE-2025-3154

CVE-2025-3154 affects Xpdf up to version 4.05, due to an out-of-bounds array write triggered by an invalid VerticesPerRow value in a PDF shading dictionary. Fedora advisories show the fix as xpdf-4.06, and Slackware/Nessus entries reference the same vulnerability family; upgrade to 4.06 (or newer...

2.1CVSS7.2AI score0.00161EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/04/02 10:18 p.m.•22 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS4.5AI score0.00161EPSS
SaveExploits0
Mend
Mend
•added 2025/04/02 10:18 p.m.•2 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.9CVSS0.00161EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•7 views

PT-2025-14564

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is an out-of-bounds array write, triggered by an invalid VerticesPerRow value in a PDF shading dictionary. Recommendations For versions 4.05 and earlier, update to a version that fixes this...

2.1CVSS6.7AI score0.00161EPSS
SaveExploits0References13
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•14 views

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf 4.05 and earlier versions, which stems from an out-of-bounds array write due to an invalid VerticesPerRow value in the PDF...

2.1CVSS4.3AI score0.00161EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•3 views

CVE-2025-3154: Out-of-bounds Write

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS5.5AI score0.00161EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 6:15 a.m.•30 views

CVE-2025-30840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS0.00311EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 5:31 a.m.•9 views

CVE-2025-30840 WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS7.3AI score0.00311EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 5:31 a.m.•32 views

CVE-2025-30840 WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS0.00311EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 5:31 a.m.•76 views

CVE-2025-30840

CVE-2025-30840: Reflected XSS in xili-dictionary (WordPress plugin) due to improper neutralization of input during web page generation. Affected: xili-dictionary versions up to 2.12.5 (vulnerable range not further specified). Root cause: insufficient escaping of user-controlled input in page gene...

7.1CVSS7.2AI score0.00311EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•17 views

PT-2025-14055 · Unknown · Xili-Dictionary

Name of the Vulnerable Software and Affected Versions: xili-dictionary versions 2.12.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the xili-dictionary...

7.1CVSS9.3AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•14 views

WordPress plugin xili-dictionary 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS7.8AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•3 views

CVE-2025-30840: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/27 12:16 p.m.•19 views

WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin xili-dictionary versions = 2.12.5...

7.1CVSS6.1AI score0.00311EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2022-41859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In freeradius, the EAP-PWD function computepasswordelement leaks information about the password which allows an attacker to substantially reduce the size of an...

7.5CVSS7.1AI score0.00867EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/03 1:35 p.m.•7 views

Malicious code in probe-dictionary-mozilla (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/03/03 1:35 p.m.•5 views

MAL-2025-1915 Malicious code in probe-dictionary-mozilla (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/02/21 12:00 a.m.•10 views

WordPress Terms Dictionary Plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Terms Dictionary versions = 1.5.1...

6.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder