Lucene search
+L

1177 matches found

Cvelist
Cvelist
added 2026/01/07 9:20 a.m.30 views

CVE-2025-13418 Responsive Pricing Table <= 5.1.12 - Authenticated (Author+) Stored Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS0.00598EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.8 views

PT-2026-1601

Name of the Vulnerable Software and Affected Versions Responsive Pricing Table plugin for WordPress versions prior to 5.1.13 Description The software is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. An authenticated attacker with Author-lev...

6.4CVSS5.5AI score0.00598EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.10 views

WordPress plugin Responsive Pricing Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00598EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/25 9:52 p.m.4 views

EUVD-2025-205395

Malicious code in bettermode-icons npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/12/25 9:52 p.m.2 views

MAL-2025-192938 Malicious code in bettermode-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8112bbccd7b047a03169d6591f7ab7f756044a4203b2435152fe708cad5d5 The package bettermode-icons was found to contain malicious code. Source: ossf-package-analysis...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/25 9:52 p.m.13 views

Malicious code in bettermode-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea8112bbccd7b047a03169d6591f7ab7f756044a4203b2435152fe708cad5d5 The package bettermode-icons was found to contain malicious code. Source: ossf-package-analysis...

7.1AI score
SaveExploits0
Snyk
Snyk
added 2025/12/23 7:10 p.m.4 views

Malicious Package

Overview mui-wrapper-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/23 7:49 a.m.6 views

Malicious code in @ownbackup/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c792960e05f18ba855e8f28d02adbcf83b9dae5ccddfd6558ec016f280cb6bee The package @ownbackup/icons was found to contain malicious code...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/12/23 7:49 a.m.5 views

EUVD-2025-204950

Malicious code in @ownbackup/icons npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/12/23 7:49 a.m.4 views

MAL-2025-192703 Malicious code in @ownbackup/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c792960e05f18ba855e8f28d02adbcf83b9dae5ccddfd6558ec016f280cb6bee The package @ownbackup/icons was found to contain malicious code...

6.8AI score
SaveExploits0
Snyk
Snyk
added 2025/12/15 7:37 a.m.3 views

Malicious Package

Overview @wb-drive/icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/12/12 6:31 a.m.5 views

Malicious Package

Overview wds-icons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Apple
Apple
added 2025/12/12 12:0 a.m.17 views

About the security content of tvOS 26.2

About the security content of tvOS 26.2 This document describes the security content of tvOS 26.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS7.7AI score0.22721EPSS
SaveExploits15References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/11 12:17 p.m.7 views

Malicious code in mui-wrapper-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ea3148c55718cb089042d3671df0f2d236405b4d4f30498d795ddef19e7983 The package mui-wrapper-icons was found to contain malicious code. Source: ghsa-malware...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/12/11 12:17 p.m.5 views

MAL-2025-192541 Malicious code in mui-wrapper-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ea3148c55718cb089042d3671df0f2d236405b4d4f30498d795ddef19e7983 The package mui-wrapper-icons was found to contain malicious code. Source: ghsa-malware...

7AI score
SaveExploits0References1
NVD
NVD
added 2025/12/08 5:16 p.m.5 views

CVE-2025-48589

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00089EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/08 5:16 p.m.9 views

CVE-2025-48589

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00089EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/08 4:57 p.m.24 views

CVE-2025-48589

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00089EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/08 4:57 p.m.32 views

CVE-2025-48589

CVE-2025-48589 affects Google Android components, with the vulnerability located in multiple functions of HeaderPrivacyIconsController.kt. The underlying issue is a logic error that can grant permissions across users, enabling local elevation of privilege without extra execution privileges and wi...

7.8CVSS6.5AI score0.00089EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/08 4:57 p.m.2 views

CVE-2025-48589

In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5AI score0.00089EPSS
SaveExploits0References2
Rows per page
Query Builder