Lucene search
+L

1520 matches found

Patchstack
Patchstack
added 2025/03/27 11:16 a.m.9 views

WordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin SyntaxHighlighter Evolved versions = 3.7.1...

6.5CVSS6.1AI score0.00271EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS7.2AI score0.00271EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/27 11:15 a.m.29 views

CVE-2025-30903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.8 views

CVE-2025-30903 WordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS7.3AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.63 views

CVE-2025-30903

The connected vulnerability entry for CVE-2025-30903 maps to SyntaxHighlighter Evolved (WordPress) and shows a concrete flaw: version

6.5CVSS7.2AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.35 views

CVE-2025-30903 WordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.11 views

WordPress plugin SyntaxHighlighter Evolved 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.5CVSS8AI score0.00271EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/02/08 12:0 a.m.13 views

Juniper Networks Junos OS Evolved Memory Misreference Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A memory misreference vulnerability exists in Juniper Networks Junos OS Evolved, which arises from a failure to free kernel memory when processing certain malformed IPv6 packets, and can be exploited by an...

8.7CVSS6.7AI score0.00597EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/05 4:15 p.m.8 views

CVE-2024-39564

This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability in the routing process daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a malformed BGP Path attribute update which allocates memory used to...

8.7CVSS5.8AI score0.00404EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/05 3:31 p.m.88 views

CVE-2024-39564

CVE-2024-39564 describes a double-free vulnerability in Juniper’s routing process daemon (rpd) for Junos OS and Junos OS Evolved. A malformed BGP Path attribute update can trigger a memory double-free in the rpd log path, causing the process to crash and resulting in a Denial of Service. Affected...

8.7CVSS6.8AI score0.00404EPSS
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.9 views

The vulnerability of the Juniper Tunnel Driver (JTD) driver for Juniper Networks’ Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Juniper Tunnel Driver JTD driver for Juniper Networks’ Junos OS Evolved operating systems is related to the lack of memory release after the effective lifespan of the driver. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending...

7.8CVSS5.5AI score0.00597EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:0 a.m.12 views

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack by sending...

6.5CVSS5.4AI score0.00231EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.7 views

The vulnerability of demons that implement routing protocols (rpd) in Junos OS and Junos OS Evolved allows a attacker to cause a service failure.

The vulnerability of demons that implement routing protocols for Junos OS and Junos OS Evolved is related to reading memory outside of the allowed range. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending specially crafted BGP packets remotely...

7.8CVSS5.4AI score0.00714EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2025/01/09 7:15 p.m.6 views

CVE-2025-21598

An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon rpd allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receive trace options enabled to crash rpd. This issue affects:...

8.2CVSS5.8AI score0.00714EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/09 5:15 p.m.11 views

CVE-2025-21599

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver jtd of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes...

8.7CVSS0.00597EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/09 5:15 p.m.6 views

CVE-2025-21599

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver jtd of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes...

8.7CVSS5.8AI score0.00597EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/09 4:46 p.m.74 views

CVE-2025-21599

CVE-2025-21599 affects Juniper Networks Junos OS Evolved. The vulnerability is in the Juniper Tunnel Driver (jtd) where a memory misreference occurs after handling certain malformed IPv6 packets, causing kernel memory not to be freed and leading to memory exhaustion and a Denial of Service. Affec...

8.7CVSS7.5AI score0.00597EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 4:46 p.m.12 views

CVE-2025-21599 Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver jtd of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes...

8.7CVSS7.1AI score0.00597EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 4:46 p.m.23 views

CVE-2025-21599 Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver jtd of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes...

8.7CVSS0.00597EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.8 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

7.1CVSS6.8AI score0.00231EPSS
SaveExploits0References1
Rows per page
Query Builder