Lucene search
K

47 matches found

Amazon
Amazon
added 2025/10/27 12:0 a.m.5 views

Important: squid

Issue Overview: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a remote client to identify security tokens or credentials used internally by a web...

10CVSS6.9AI score0.20562EPSS
Exploits1
OSV
OSV
added 2025/10/17 5:15 p.m.4 views

ALPINE-CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

7.5CVSS6.7AI score0.20562EPSS
Exploits1References1
NVD
NVD
added 2025/10/17 5:15 p.m.3 views

CVE-2025-62168

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS0.20562EPSS
Exploits1References3
OSV
OSV
added 2025/10/17 4:21 p.m.3 views

CVE-2025-62168 Squid vulnerable to information disclosure via authentication credential leakage in error handling

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS6.8AI score0.20562EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/17 4:21 p.m.3 views

EUVD-2025-34894

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...

10CVSS6.2AI score0.20562EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2001-1342

Malware in sbrugna...

7.5CVSS6.4AI score0.00467EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-57448

Malicious code in bioql PyPI...

6.4CVSS6.2AI score0.0012EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.2 views

CVE-2025-53464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

5.9CVSS5.9AI score0.00098EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 7:39 p.m.4 views

WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Bao BlueRock in WordPress Plugin WP Mailto Links versions = 3.1.4...

5.9CVSS6AI score0.00098EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/09/22 7:15 p.m.2 views

CVE-2025-53464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

5.9CVSS0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.2 views

CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ironikus WP Mailto Links allows Stored XSS. This issue affects WP Mailto Links: from n/a through 3.1.4...

5.9CVSS5.6AI score0.00098EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.9 views

CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

5.9CVSS0.00098EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.7 views

CVE-2025-53464

CVE-2025-53464 affects the WordPress plugin WP Mailto Links, with a Stored XSS vulnerability in the plugin’s handling of input during web page generation. Affected versions are listed as WP Mailto Links

5.9CVSS5.9AI score0.00098EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.3 views

PT-2025-39000

Name of the Vulnerable Software and Affected Versions Ironikus WP Mailto Links versions through 3.1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...

5.9CVSS5.8AI score0.00098EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin WP Mailto Links 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

5.9CVSS5.8AI score0.00098EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/14 12:0 a.m.3 views

PT-2025-42624

Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.2 Squid versions 3.x through 3.5.28 Squid versions 4.x through 4.17 Squid versions 5.x through 5.9 Squid versions 6.x through 6.14 Squid versions 7.x through 7.1 Description Squid, a caching proxy for the Web, contain...

10CVSS6.8AI score0.20562EPSS
Exploits3References102
OSV
OSV
added 2025/09/02 4:41 p.m.2 views

USN-7729-1 kdepim vulnerabilities

Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail application of KDE PIM could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Und...

6.5CVSS7.1AI score0.00447EPSS
Exploits3References5
RedhatCVE
RedhatCVE
added 2025/05/23 2:40 a.m.8 views

CVE-2023-5109

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.0012EPSS
Exploits1References1
OSV
OSV
added 2023/10/20 8:15 a.m.2 views

CVE-2023-5109

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS6.7AI score0.0012EPSS
Exploits1References2
Prion
Prion
added 2023/10/20 8:15 a.m.10 views

Cross site scripting

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

4.9CVSS5.1AI score0.0012EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder