Lucene search
+L

3553 matches found

NVD
NVD
•added 2025/03/03 2:15 p.m.•12 views

CVE-2025-23595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainpulse Page Health-O-Meter page-health-o-meter allows Reflected XSS.This issue affects Page Health-O-Meter: from n/a through = 2.0...

7.1CVSS0.0037EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•52 views

CVE-2025-23595

The CVE-2025-23595 entry concerns the WordPress Page Health-O-Meter plugin (versions up to and including 2.0). Affected component is the plugin’s input handling during page generation, where improper neutralization enables Reflected Cross-Site Scripting (XSS). Public documents identify the vulner...

7.1CVSS5.9AI score0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•6 views

CVE-2025-23595 WordPress Page Health-O-Meter plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Page Health-O-Meter allows Reflected XSS. This issue affects Page Health-O-Meter: from n/a through 2.0...

7.1CVSS7.1AI score0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/03 1:30 p.m.•22 views

CVE-2025-23595 WordPress Page Health-O-Meter plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainpulse Page Health-O-Meter page-health-o-meter allows Reflected XSS.This issue affects Page Health-O-Meter: from n/a through = 2.0...

7.1CVSS0.0037EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•8 views

WordPress plugin Page Health-O-Meter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.6AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•2 views

PT-2025-9385

Name of the Vulnerable Software and Affected Versions Page Health-O-Meter versions n/a through 2.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions n/a...

7.1CVSS0.0037EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•4 views

CVE-2025-23595: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brainpulse Page Health-O-Meter page-health-o-meter allows Reflected XSS.This issue affects Page Health-O-Meter: from n/a through = 2.0...

7.1CVSS5.8AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/02 5:18 p.m.•10 views

CVE-2025-20049

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS6.6AI score0.00299EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/02 5:18 p.m.•15 views

CVE-2025-20060

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS6.5AI score0.00398EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/01 12:28 a.m.•26 views

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

5.5CVSS6AI score0.00187EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/28 5:15 p.m.•15 views

CVE-2025-20049

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS0.00299EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/28 5:15 p.m.•16 views

CVE-2025-20060

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS0.00398EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/28 5:15 p.m.•17 views

CVE-2025-24316

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...

6.9CVSS0.00309EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 5:11 p.m.•37 views

CVE-2025-24316 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...

6.9CVSS0.00309EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 5:11 p.m.•12 views

CVE-2025-24316 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality...

6.9CVSS5.3AI score0.00309EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 5:09 p.m.•37 views

CVE-2025-24318 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise...

6.8CVSS0.0035EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 5:09 p.m.•9 views

CVE-2025-24318 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Sensitive Cookie Without 'HttpOnly' Flag

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise...

6.8CVSS6.6AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/28 5:04 p.m.•36 views

CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS0.00299EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/28 5:04 p.m.•86 views

CVE-2025-20049

The CVE-2025-20049 entry concerns the Dario Health portal service application, which is vulnerable to cross-site scripting (XSS). The available connected data confirms XSS as the underlying issue and that an attacker could obtain sensitive information via this vulnerability in the portal service....

7.1CVSS6.7AI score0.00299EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/28 5:04 p.m.•4 views

CVE-2025-20049 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cross-site Scripting

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information...

7.1CVSS5.6AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder