6639 matches found
WordPress plugin KenthaRadio has a cross-site scripting vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin MemberPress Discord Addon: Cross-site scripting vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
PT-2026-4085
Name of the Vulnerable Software and Affected Versions Easy Theme Options versions prior to 1.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-site Scripting XSS. This means that malicious code can ...
PT-2026-4214
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...
USN-7971-1: GLib vulnerability
It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-7970-1: iperf3 vulnerabilities
Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process to stop responding, waiting for input on the control connection. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in...
USN-7970-1 iperf3 vulnerabilities
Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process to stop responding, waiting for input on the control connection. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in...
CVE-2026-1183 HTML injection in multiple Botble products
HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...
EEF-CVE-2026-21618 Cross-site scripting (XSS) in OAuth Device Authorization screen
Summary Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in hexpm hexpm/hexpm 'Elixir.HexpmWeb.SharedAuthorizationView' modules allows Cross-Site Scripting XSS. This vulnerability is associated with program files...
PT-2026-3443
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in hexpm hexpm/hexpm 'Elixir.HexpmWeb.SharedAuthorizationView' modules allows Cross-Site Scripting XSS. This vulnerability is associated with program files lib/hexpm web/views/shared...
Hexpm security vulnerability
Hexpm is a web page and interface developed by Hex. Hexpm has a security vulnerability, which stems from improper input handling and may lead to cross-site scripting attacks...
Dell PowerProtect Data Domain OS Command Injection Vulnerability (CNVD-2026-18590)
Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. The Dell PowerProtect Data Domain suffers from an operating system command injection vulnerability that originates from improper...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
Hanwha Vision Camera Improper Neutralization of Input During Web Page Generation (CVE-2025-8075)
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
CVE-2026-22917
Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...
