Lucene search
+L

15301 matches found

Tenable Nessus
Tenable Nessus
•added 2025/05/01 12:00 a.m.•12 views

NVIDIA Linux GPU Display Driver (April 2025)

A display driver installed on the remote Linux host is affected by a vulnerability: - NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of...

7.8CVSS7.4AI score0.00223EPSS
SaveExploits0References2
Citrix
Citrix
•added 2025/04/30 12:00 a.m.•24 views

CWA for IOS | IOS 17.0 not showing localhost as endpoint name in Citrix Director.

Customer have recently upgraded the IOS to 17.0.2 from 16.7 on their IPad's. Since then, the Endpoint name is showing up as Local host on Citrix Director CWA tested is 2309. Due to this issue, the application launch is failing due to a policy they have set this policy enables launch of applicatio...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/29 12:00 a.m.•12 views

PT-2025-27635

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the issue described Description: The issue is related to a false positive warning in the Linux kernel, specifically in the drm/amd/display component. This warning occurs due...

7.8CVSS8.2AI score0.00173EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/04/27 7:46 a.m.•65 views

CVE-2024-52888 Stored-XSS

For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties...

5.4CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/27 7:46 a.m.•164 views

CVE-2024-52888

CVE-2024-52888 affects Check Point Mobile Access (R82 and earlier). An authenticated end-user may trigger a script during the portal’s display of a directory or file properties, consistent with a stored XSS issue in the File Share access path. The observable behavior is a script execution within ...

5.4CVSS5.4AI score0.00228EPSS
SaveExploits0References1Affected Software2
RedhatCVE
RedhatCVE
•added 2025/04/26 11:02 p.m.•39 views

CVE-2025-3749

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/04/25 2:00 a.m.•31 views

[SECURITY] Fedora 40 Update: ImageMagick-7.1.1.47-1.fc40

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

7.5CVSS4AI score0.00577EPSS
SaveExploits0
Fedora
Fedora
•added 2025/04/25 1:51 a.m.•27 views

[SECURITY] Fedora 41 Update: ImageMagick-7.1.1.47-1.fc41

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

7.5CVSS4AI score0.00577EPSS
SaveExploits0
Citrix
Citrix
•added 2025/04/25 12:00 a.m.•23 views

Canvas Display - Use multiple monitors as a single monitor for App launch

Map multiple monitors attached to the Endpoint as a single display to stretch the Application window across all the monitors...

7.1AI score
SaveExploits0
NVD
NVD
•added 2025/04/24 11:15 p.m.•32 views

CVE-2025-3749

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.0031EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/04/24 10:22 p.m.•43 views

CVE-2025-3749 Breeze Display <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.0031EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/04/24 10:22 p.m.•12 views

CVE-2025-3749 Breeze Display <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS5.9AI score0.0031EPSS
SaveExploits0References4
CVE
CVE
•added 2025/04/24 10:22 p.m.•89 views

CVE-2025-3749

CVE-2025-3749 — Breeze Display (WordPress) Stored XSS : WordPress Breeze Display plugin versions up to 1.2.3 allow stored cross-site scripting via the cal_size parameter due to insufficient input sanitization and output escaping. Exploitation requires authentication at Contributor level or higher...

6.4CVSS5.8AI score0.0031EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/04/24 8:15 p.m.•16 views

WordPress Breeze Display plugin <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via cal_size Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via calsize Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Breeze Display versions = 1.2.3...

6.4CVSS6.3AI score0.0031EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/04/24 12:00 a.m.•19 views

WordPress plugin Breeze Display 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6.6AI score0.0031EPSS
SaveExploits0References5
Nvidia
Nvidia
•added 2025/04/24 12:00 a.m.•81 views

Security Bulletin: NVIDIA GPU Display Driver - April 2025

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

7.8CVSS8.3AI score0.00223EPSS
SaveExploits0Affected Software3
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•21 views

PT-2025-17859 · WordPress · Breeze Display

Name of the Vulnerable Software and Affected Versions: Breeze Display plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

6.4CVSS6.1AI score0.0031EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•6 views

CVE-2025-3749: Improper Neutralization of Input During Web Page Generation

The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘calsize’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS6AI score0.0031EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/04/23 2:38 a.m.•22 views

SUSE CVE-2025-22093

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx-dmubsrv will de NULL if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be dereferenced in dmubhwlockmgrcmd if shouldusedmublock...

5.5CVSS7.6AI score0.00204EPSS
SaveExploits0References16
osv_clsa
osv_clsa
•added 2025/04/21 9:14 p.m.•20 views

CLSA-2025-1745270046 libX11: Fix of CVE-2023-3138

CVE-2023-3138: prevent out-of-bounds writes in XQueryExtension responses within Display struct...

7.5CVSS6.9AI score0.01656EPSS
SaveExploits0References1
Rows per page
Query Builder