Lucene search
+L

6174 matches found

RedhatCVE
RedhatCVE
•added 2025/04/13 9:00 a.m.•17 views

CVE-2025-32558

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ketanajani Duplicate Title Checker duplicate-title-checker allows Blind SQL Injection.This issue affects Duplicate Title Checker: from n/a through = 1.2...

8.5CVSS7.3AI score0.00502EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 9:15 a.m.•40 views

CVE-2025-32558

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ketanajani Duplicate Title Checker duplicate-title-checker allows Blind SQL Injection.This issue affects Duplicate Title Checker: from n/a through = 1.2...

8.5CVSS0.00502EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/11 8:42 a.m.•8 views

CVE-2025-32558 WordPress Duplicate Title Checker Plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ketanajani Duplicate Title Checker duplicate-title-checker allows Blind SQL Injection.This issue affects Duplicate Title Checker: from n/a through = 1.2...

8.5CVSS8.9AI score0.00502EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 8:42 a.m.•70 views

CVE-2025-32558

CVE-2025-32558 affects the WordPress plugin “Duplicate Title Checker” (

8.5CVSS7.3AI score0.00502EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/11 8:42 a.m.•36 views

CVE-2025-32558 WordPress Duplicate Title Checker Plugin <= 1.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ketanajani Duplicate Title Checker duplicate-title-checker allows Blind SQL Injection.This issue affects Duplicate Title Checker: from n/a through = 1.2...

8.5CVSS0.00502EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/11 12:00 a.m.•2 views

PT-2025-16068

Name of the Vulnerable Software and Affected Versions: Duplicate Title Checker versions n/a through 1.2 Description: The issue is related to an SQL Injection vulnerability, specifically an improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection...

8.5CVSS5.8AI score0.00502EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•15 views

WordPress plugin Duplicate Title Checker SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

8.5CVSS9.1AI score0.00502EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•4 views

CVE-2025-32558: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ketanajani Duplicate Title Checker duplicate-title-checker allows Blind SQL Injection.This issue affects Duplicate Title Checker: from n/a through = 1.2...

8.5CVSS5.8AI score0.00502EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/04/09 12:30 p.m.•11 views

Improper Input Validation

Overview org.apache.poi:poi-ooxml is a Java API To Access Microsoft Format Files. Affected versions of this package are vulnerable to Improper Input Validation due to the parsing process of OOXML format files. An attacker can manipulate the file content by adding zip entries with duplicate names,...

6.9CVSS6.7AI score0.01355EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2025/04/09 12:15 p.m.•11 views

DEBIAN-CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

5.3CVSS6.2AI score0.01355EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/09 12:15 p.m.•18 views

UBUNTU-CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

5.3CVSS6.8AI score0.01355EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•5 views

CVE-2025-31672: Improper Input Validation

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

5.3CVSS5.6AI score0.01355EPSS
SaveExploits0References1
osv_bit
osv_bit
•added 2025/04/03 2:09 p.m.•27 views

BIT-JOOMLA-2020-10240

An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses...

5.3CVSS6.5AI score0.01315EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2025/04/01 9:31 p.m.•15 views

GHSA-929M-PHJG-QWCC Duplicate Advisory: MathLive's Lack of Escaping of HTML allows for XSS

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-qwj6-q94f-8425. This link is maintained to preserve external references. Original Description Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before fixed in 0.104.0 allows an attacker...

6.3CVSS6.4AI score
SaveExploits0References3
NVD
NVD
•added 2025/04/01 4:15 p.m.•22 views

CVE-2025-21960

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxtxdpbuildskb The bnxtrxpkt updates ipsummed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDPPASS, the bnxtxdpbuildskb is called to...

7.5CVSS0.00522EPSS
SaveExploits0References6
CVE
CVE
•added 2025/04/01 3:46 p.m.•151 views

CVE-2025-21960

CVE-2025-21960 is addressed in the TencentOS Server 4 kernel advisory (TSSA-2025:0348). The issue is in nbd reconnect handling after disconnect, potentially enabling a use-after-free via recv_work when nbd_config is freed. The advisory states the root cause: in nbd_genl_disconnect(), NBD_RT_BOUND...

7.5CVSS7AI score0.00522EPSS
SaveExploits0References6Affected Software1
osv_cve
osv_cve
•added 2025/04/01 3:46 p.m.•21 views

CVE-2025-21960 eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxtxdpbuildskb The bnxtrxpkt updates ipsummed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDPPASS, the bnxtxdpbuildskb is called to...

7.5CVSS6.3AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2025/04/01 3:46 p.m.•36 views

CVE-2025-21960 eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxtxdpbuildskb The bnxtrxpkt updates ipsummed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDPPASS, the bnxtxdpbuildskb is called to...

7.5CVSS0.00522EPSS
SaveExploits0References5
Amazon
Amazon
•added 2025/04/01 12:00 a.m.•27 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the inode number is not the invalid value of zero CVE-2024-26982 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm-srcu when handling KVMSETVCPUEVENTS...

7.8CVSS6.9AI score0.37997EPSS
SaveExploits4
RedhatCVE
RedhatCVE
•added 2025/03/30 12:41 p.m.•32 views

CVE-2025-31471

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Falcon Solutions Duplicate Page and Post duplicate-post-and-page allows Stored XSS.This issue affects Duplicate Page and Post: from n/a through = 1.0...

5.9CVSS7.2AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder