31661 matches found
CVE-2025-58640 WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Document Engine document-engine allows Stored XSS.This issue affects Document Engine: from n/a through = 1.2...
CVE-2025-58640
CVE-2025-58640 affects MatrixAddons/WordPress Document Engine (Document Engine) and is a stored XSS vulnerability caused by improper input neutralization during web page generation. Affected versions: up to 1.2 (inclusive). The issue is confirmed in multiple sources; remediation per Patch/SEC gui...
CVE-2025-58640 WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Document Engine document-engine allows Stored XSS.This issue affects Document Engine: from n/a through = 1.2...
PT-2025-35834
Name of the Vulnerable Software and Affected Versions: AI Engine plugin for WordPress versions up to and including 2.9.5 Description: The AI Engine plugin for WordPress is susceptible to unauthorized access and data loss. This is due to a missing capability check in the rest list and delete files...
PT-2025-35768
Name of the Vulnerable Software and Affected Versions: MatrixAddons Document Engine versions through 1.2 Description: MatrixAddons Document Engine is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS...
Linux Distros Unpatched Vulnerability : CVE-2014-1721
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of...
WordPress plugin Document Engine 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2016-8642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 2.x and 3.x, the question engine allows access to files that should not be available. CVE-2016-8642 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2020-5529
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute...
WordPress plugin AI Engine 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Linux Distros Unpatched Vulnerability : CVE-2012-5120
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or...
Linux Distros Unpatched Vulnerability : CVE-2014-1729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service...
Bevy Event 安全漏洞
Bevy Event is a communication mechanism in the Bevy Engine from Bevy USA. A security vulnerability exists in Bevy Event version 2025-07-22 and earlier, which stems from a misconfiguration of SSO and could lead to account takeover...
Linux Distros Unpatched Vulnerability : CVE-2020-13936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account...
Linux Distros Unpatched Vulnerability : CVE-2017-11475
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. CVE-2017-11475 Note that Nessus relies on the...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 6 security fixes: 434513380 High CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team on 2025-07-28 437147699 Medium CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani on 2025-08-07...
编号撤回
Google Chrome is a web browser developed by Google, known for being fast, secure and personalized, with support for multi-device synchronization and smart tool integration. Google Chrome suffers from a post-release reuse vulnerability that stems from the mishandling of memory objects by the V8...
Google Chrome < 140.0.7339.80 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 140.0.7339.80. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop advisory. - Inappropriate implementation in Downloads in Google Chrome on Android prior to...
Google Chrome < 140.0.7339.80 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 140.0.7339.80. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop advisory. - Use after free in V8. CVE-2025-9864 - Inappropriate implementation in Toolba...
