Lucene search
+L

53 matches found

Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•9 views

PT-2025-42352

Name of the Vulnerable Software and Affected Versions BIG-IP Advanced WAF or ASM affected versions not specified Description When a BIG-IP Advanced WAF or ASM security policy is configured with a URL exceeding 1024 characters in length for the Data Guard Protection Enforcement setting, the bd...

8.7CVSS5.7AI score0.00348EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•8 views

CVE-2025-61938: Improper Validation of Specified Quantity in Input

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly. Note: Software versions which have...

8.7CVSS5.8AI score0.00348EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2007-0296

Malware in sbrugna...

1.7CVSS6.4AI score0.00413EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2005-3437

Malware in sbrugna...

10CVSS6.3AI score0.05866EPSS
SaveExploits5References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-3458

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 2:34 a.m.•19 views

CVE-2025-23828

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS8.5AI score0.00348EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 9:15 p.m.•18 views

CVE-2025-23828

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS0.00348EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:07 p.m.•9 views

CVE-2025-23828 WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS8.4AI score0.00348EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:07 p.m.•61 views

CVE-2025-23828

CVE-2025-23828 — Stored XSS in WordPress Data Guard (OriginalTips.com WordPress Data Guard): Improper neutralization of input during web page generation leading to cross-site scripting. Affected: WordPress Data Guard, from n/a through 8. CVSS v3.1 base score 7.1 (HIGH). Exact exploit details, vul...

7.1CVSS8.4AI score0.00348EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/16 8:07 p.m.•33 views

CVE-2025-23828 WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS0.00348EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/16 6:42 p.m.•16 views

WordPress WordPress Data Guard [Website Security] plugin <= 8 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin WordPress Data Guard versions = 8...

7.1CVSS8.4AI score0.00348EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/16 12:00 a.m.•6 views

PT-2025-5126

Name of the Vulnerable Software and Affected Versions WordPress Data Guard versions prior to 8 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious script...

7.1CVSS8.3AI score0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•6 views

CVE-2025-23828: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sindhi WordPress Data Guard wordpress-data-guards allows Stored XSS.This issue affects WordPress Data Guard: from n/a through = 8...

7.1CVSS8.5AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•19 views

WordPress plugin: WordPress Data Guard cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin A cross-si...

7.1CVSS8AI score0.00348EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/11/05 6:15 p.m.•23 views

AZL-52471 CVE-2024-50117 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd: Guard against bad data for ATIF ACPI method If a BIOS provides bad data in response to an ATIF method call this causes a NULL pointer dereference in the caller. ? showregs arch/x86/kernel/dumpstack.c:478 discriminator 1 ...

5.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2023/02/21 6:35 p.m.•52 views

K40452417: BIG-IP ASM memory exhaustion vulnerability CVE-2019-6682

Security Advisory Description The BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained systems in which the security policy is configured with response-side...

7.5CVSS7.5AI score0.01014EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/12/31 12:00 a.m.•70 views

F5 Networks BIG-IP : BIG-IP ASM memory exhaustion vulnerability (K40452417)

The BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained systems in which the security policy is configured with response-side features, such as Data Guard or...

7.5CVSS7.4AI score0.01014EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2019/12/23 5:15 p.m.•23 views

CVE-2019-6682

On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained...

7.5CVSS7.1AI score0.01014EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/23 5:15 p.m.•39 views

CVE-2019-6682

On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained...

7.5CVSS7.5AI score0.01014EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/23 12:00 a.m.•5 views

CVE-2019-6682: Uncontrolled Resource Consumption

On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained...

7.5CVSS7.2AI score0.01014EPSS
SaveExploits0References2
Rows per page
Query Builder