204 matches found
CVE-2025-30792 WordPress Comment Approved Notifier Extended plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ufukart Comment Approved Notifier Extended comment-approved-notifier-extended allows Stored XSS.This issue affects Comment Approved Notifier Extended: from n/a through = 5.2...
OpenHarmony 资源管理错误漏洞
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A resource management error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from reuse after release and could lead to arbitrary code execution in pre-installe...
CVE-2025-0924
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
MAL-2025-769 Malicious code in @haysee/v5.2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tr46mine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d941efa6b0b6b2ec8beb148535517722510f96ac8bb2f5fde58650fe7b542342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-22387
An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking...
Optimizely Configured Commerce 安全漏洞
Optimizely Configured Commerce is a combined commerce platform from Optimizely, Inc. A security vulnerability exists in Optimizely Configured Commerce prior to version 5.2.2408, which stems from a vulnerability that allows session tokens bound to logged out sessions to remain active and available...
CVE-2024-37845
MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution RCE vulnerability via the Active Process Command feature...
OvalEdge 安全漏洞
OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /profile/updateProfile via the userId...
CVE-2024-9167
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...
Ivanti Velocity License Server 安全漏洞
Ivanti Velocity License Server is an application from Ivanti USA that provides licenses to mobile devices using Velocity or terminal emulation clients. A security vulnerability exists in Ivanti Velocity License Server versions prior to 5.2, which stems from the presence of insecure privileges tha...
WordPress plugin Advanced File Manager 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
WordPress plugin Reviews and Rating – Google Reviews 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Reviews and...
PT-2024-40178 · Shopware · Shopware
Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.2.25 Description: The issue allows for the execution of authorized foreign code under certain circumstances. Recommendations: For versions prior to 5.2.25, update to version 5.2.25 or later to resolve the issue...
WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability
Captcha Bypass vulnerability discovered by qilin99 Patchstack Alliance in WordPress Plugin Captcha by BestWebSoft versions = 5.2.0...
FusionPBX Security Vulnerabilities
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conferencing server and voice application server. A security vulnerability exists in FusionPBX versions prior to 5.2.0 that stems from the...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which stems from an HTML injection vulnerability...
openCRX Security Vulnerabilities
openCRX is an open source Crm software. A security vulnerability exists in openCRX version 5.2.0, which stems from a cross-site scripting XSS vulnerability in the Name field...
CVE-2023-49770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter Raschendorfer Smart External Link Click Monitor Link Log allows Stored XSS.This issue affects Smart External Link Click Monitor Link Log: from n/a through 5.0.2...