Lucene search
+L

1721 matches found

Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.17 views

PT-2026-20505

Name of the Vulnerable Software and Affected Versions InvoicePlane version 1.7.0 Description InvoicePlane is a self-hosted open source application used for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS issue exists in the upload Invoice Logo function. The function...

5.7CVSS5.5AI score0.0022EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.8 views

InvoicePlane 跨站脚本漏洞

InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. Version 1.7.0 of InvoicePlane contains a cross-site scripting vulnerability. This vulnerability stems from the function tha...

7.5CVSS5.6AI score0.0022EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.11 views

InvoicePlane 跨站脚本漏洞

InvoicePlane is an open-source application developed by InvoicePlane. It provides a self-hosted open-source tool for managing your quotes, invoices, customers, and payments. Version 1.7.0 of InvoicePlane contains a cross-site scripting vulnerability. This vulnerability stems from the login logo...

7.5CVSS5.6AI score0.0022EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.13 views

PT-2026-20545

Name of the Vulnerable Software and Affected Versions InvoicePlane version 1.7.0 Description InvoicePlane is a self-hosted open source application used for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS issue exists in the upload Login Logo function. The application...

7.5CVSS5.5AI score0.0022EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2026/02/12 7:28 p.m.9 views

CVE-2025-12059

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9...

9.8CVSS5.4AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 3:16 p.m.12 views

CVE-2025-12059

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9...

9.8CVSS0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/11 1:58 p.m.6 views

CVE-2025-12059 Improper Access Control in Logo Software's Logo j-Platform

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9...

9.8CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/11 1:58 p.m.35 views

CVE-2025-12059 Improper Access Control in Logo Software's Logo j-Platform

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9...

9.8CVSS0.00307EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/11 1:58 p.m.4 views

CVE-2025-12059

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9...

9.8CVSS5.8AI score0.00307EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/11 1:58 p.m.12 views

CVE-2025-12059

CVE-2025-12059 concerns Logo j-Platform by Logo Software Industry and Trade Inc. The issue is a vulnerability in which insertion of sensitive information into externally-accessible files or directories is possible due to incorrectly configured access control security levels. Affected software: Lo...

9.8CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.13 views

PT-2026-7591

Name of the Vulnerable Software and Affected Versions Logo j-Platform versions 3.29.6.4 through 13112025 Description An issue exists in Logo j-Platform that allows for the insertion of sensitive information into externally-accessible files or directories due to incorrectly configured access contr...

9.8CVSS5.4AI score0.00307EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.13 views

Logo j-Platform 安全漏洞

Logo j-Platform is an enterprise resource planning platform developed by the Turkish company Logo. Versions of Logo j-Platform from 3.29.6.4 to 13112025 contain security vulnerabilities. These vulnerabilities stem from the insertion of sensitive information into externally accessible files or...

9.8CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.12 views

PT-2026-5899

Name of the Vulnerable Software and Affected Versions Apple Vision Pro affected versions not specified Description The issue appears to be a security flaw in vision-related technology, potentially affecting Apple Vision Pro. While no public jailbreak currently exists for iOS 26.0 as of February...

5.4AI score0.00136EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.11 views

CVE-2026-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Information Security Automation
Information Security Automation
added 2026/01/24 10:32 a.m.6 views

Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary

Our PR team awarded me the “The Best Positive Speaker 2025” metal pin for public speaking, articles, and media commentary. Huge thanks to my colleagues for this! I’m very pleased. 😇 The collection is growing. 😉 This time, the pin is styled like the Friends sitcom logo. It’s made of metal, coated...

5.5AI score
SaveExploits0
NVD
NVD
added 2026/01/23 3:16 p.m.12 views

CVE-2026-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.29 views

CVE-2026-24626 WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.20 views

CVE-2026-24626

CVE-2026-24626 is a Stored XSS vulnerability in the WordPress plugin Logo Slider (logo-slider-wp) , affecting versions up to and including 4.9.0. The issue is caused by improper neutralization of user-supplied input during web page generation, enabling stored cross-site scripting via the logo-sli...

5.9CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24626 WordPress Logo Slider plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 5.1.1...

5.9CVSS5.8AI score0.00142EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through = 4.9.0...

5.9CVSS5.9AI score0.00142EPSS
SaveExploits0References2
Rows per page
Query Builder