Lucene search
+L

1284 matches found

RedhatCVE
RedhatCVE
•added 2026/01/01 1:34 p.m.•12 views

CVE-2025-62140

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...

5.9CVSS5.9AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 2:15 p.m.•15 views

CVE-2025-62140

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...

5.9CVSS0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 1:24 p.m.•21 views

CVE-2025-62140

Technical details about CVE-2025-62140 (Locatoraid Store Locator XSS) are not provided in the connected documents; no affected versions, impact, or fixes are specified here. Monitor official advisories for updates and patches.

5.9CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 1:24 p.m.•42 views

CVE-2025-62140 WordPress Locatoraid Store Locator plugin <= 3.9.68 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...

5.9CVSS0.00207EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 1:24 p.m.•14 views

EUVD-2025-205966

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.65...

5.9CVSS5.5AI score0.00207EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 1:24 p.m.•7 views

CVE-2025-62140 WordPress Locatoraid Store Locator plugin <= 3.9.65 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.65...

5.9CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 1:22 p.m.•25 views

WordPress Locatoraid Store Locator plugin <= 3.9.67 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zeeshan Haider in WordPress Plugin Locatoraid Store Locator versions = 3.9.67...

5.9CVSS5.3AI score0.00207EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•20 views

PT-2025-54332

Name of the Vulnerable Software and Affected Versions Plainware Locatoraid Store Locator versions through 3.9.65 Description A flaw exists in Plainware Locatoraid Store Locator that allows for Stored Cross-Site Scripting XSS. This issue arises from improper neutralization of input during web page...

5.9CVSS5.4AI score0.00207EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

WordPress plugin Locatoraid Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

5.9CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•4 views

CVE-2025-62140: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware Locatoraid Store Locator locatoraid allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through = 3.9.68...

5.9CVSS5.8AI score0.00207EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/24 8:15 p.m.•15 views

CVE-2019-25251

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xmlurl'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP...

6.5CVSS5.9AI score0.00333EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•5 views

RockyLinux 10 : python3.12 (RLSA-2025:23940)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23940 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description...

4.3CVSS6.3AI score0.00378EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/23 12:00 a.m.•13 views

AlmaLinux 9 : python3.12 (ALSA-2025:23323)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23323 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description bloc...

4.3CVSS6.3AI score0.00378EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/23 12:00 a.m.•14 views

AlmaLinux 10 : python3.12 (ALSA-2025:23940)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23940 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description blo...

4.3CVSS6.3AI score0.00378EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/12/22 4:40 p.m.•24 views

cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

A zip file handling flaw has been discovered in the python standard library zipfile module. The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record wou...

4.3CVSS6.1AI score0.00378EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2025/12/22 12:00 a.m.•24 views

AlmaLinux 8 : python39:3.9 (ALSA-2025:23530)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23530 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 python: Virtual environment venv activation scripts don't...

9.4CVSS6.9AI score0.01556EPSS
SaveExploits14References14
OSV
OSV
•added 2025/12/19 9:05 a.m.•18 views

RLSA-2025:23323 Moderate: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

4.3CVSS6.3AI score0.00378EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2025/12/19 9:05 a.m.•24 views

python3.9 security update

An update is available for python3.9. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming language...

6.5CVSS6.3AI score0.00744EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/19 12:00 a.m.•9 views

RockyLinux 9 : python3.9 (RLSA-2025:23342)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23342 advisory. python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used CVE-2024-5642 cpython: Python HTMLParser quadratic complexity...

6.5CVSS6.5AI score0.00744EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2025/12/19 12:00 a.m.•10 views

RockyLinux 9 : python3.12 (RLSA-2025:23323)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23323 advisory. cpython: python: Python zipfile End of Central Directory EOCD Locator record offset not checked CVE-2025-8291 Tenable has extracted the preceding description blo...

4.3CVSS6.3AI score0.00378EPSS
SaveExploits0References3
Rows per page
Query Builder