Lucene search
+L

11612 matches found

CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

WordPress plugin Ronneby Theme Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blogging websites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6AI score0.00196EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.1 views

Mozilla Firefox ESR < 115.31

The version of Firefox ESR installed on the remote Windows host is prior to 115.31. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-93 advisory. - Privilege escalation in the DOM: Notifications component. This vulnerability affects Firefox 146, Firefox ESR...

9.8CVSS8.7AI score0.00565EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

WordPress plugin Xpro Elementor Addons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

6.5CVSS5.9AI score0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.16 views

PT-2025-50057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows DOM-Based XSS.This issue affects Wp Ultimate Review: from n/a through = 2.3.6...

6.4AI score0.00245EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.14 views

WordPress plugin Betheme 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.5CVSS6AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-50075

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in muffingroup Betheme betheme allows DOM-Based XSS.This issue affects Betheme: from n/a through = 28.1.7...

6.5CVSS6.4AI score0.00196EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.14 views

Amazon Linux 2023 : firefox (ALAS2023-2025-1298)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1298 advisory. Race condition in the Graphics component. This vulnerability affects Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30. CVE-2025-13012 Mitigation bypass in the DOM: Core & HTML component...

8.8CVSS5.9AI score0.00443EPSS
SaveExploits0References20
FreeBSD
FreeBSD
added 2025/12/09 12:00 a.m.17 views

Mozilla -- Privilege escalation

https://bugzilla.mozilla.org/showbug.cgi?id=1996555 reports: Privilege escalation in the DOM: Notifications component...

8.8CVSS7.2AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.12 views

PT-2025-50046

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows DOM-Based XSS.This issue affects Xpro Elementor Addons: from n/a through = 1.4.19.1...

6.4AI score0.00258EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.14 views

PT-2025-50047

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider Pro masterslider allows DOM-Based XSS.This issue affects Master Slider Pro: from n/a through = 3.7.12...

6.4AI score0.0026EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-14323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, a...

8.8CVSS7.2AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.21 views

PT-2025-49926

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WalkerWP Walker Core walker-core allows DOM-Based XSS.This issue affects Walker Core: from n/a through = 1.3.17...

6.5CVSS6.4AI score0.0019EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.8 views

PT-2025-50044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows DOM-Based XSS.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...

6.4AI score0.00196EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.19 views

PT-2025-49927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through = 1.5.2...

6.5CVSS6.4AI score0.00196EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2025/12/09 12:00 a.m.62 views

KLA90808 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in the WebR...

9.8CVSS8.8AI score0.00596EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.5 views

Mozilla Firefox ESR < 140.6

The version of Firefox ESR installed on the remote Windows host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-94 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146 and Firefox ESR 140.6...

9.8CVSS8.7AI score0.00596EPSS
SaveExploits2References11
GithubExploit
GithubExploit
added 2025/12/08 5:43 a.m.234 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Vulnerability - CVE-2025-55182 :notebook: In...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
RedHat Linux
RedHat Linux
added 2025/12/08 1:37 a.m.19 views

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

8.1CVSS5.7AI score0.00257EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/12/08 1:37 a.m.22 views

firefox: thunderbird: Mitigation bypass in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Core & HTML component...

6.1CVSS5.7AI score0.00202EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/12/08 1:37 a.m.20 views

firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...

8.1CVSS5.7AI score0.00257EPSS
SaveExploits0References5
Rows per page
Query Builder