Lucene search
+L

2456 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-56057

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00644EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2022-33595

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.01024EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2022-52925

Malicious code in bioql PyPI...

7.4CVSS7.3AI score0.00885EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/10/02 12:00 a.m.12 views

PT-2025-40653

CVE-2025-61852 - Cisco WebEx Meeting Center Unvalidated Redirect CVE ID : CVE-2025-61852 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

6.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/19 12:00 a.m.12 views

PT-2025-38651

CVE-2025-59675 - Cisco WebEx Meeting Center Stored XSS CVE ID : CVE-2025-59675 Published : Sept. 19, 2025, 3:15 a.m. | 1 hour, 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

5.6AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/05 6:13 p.m.7 views

CVE-2025-10043

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator \. As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...

2.7CVSS3.6AI score0.00712EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-5543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide...

3.3CVSS5AI score0.00243EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.15 views

PT-2025-34531 · Undefined · Undefined

CVE-2025-57825 - Cisco WebEx Meeting Center Cross-Site Request Forgery CVE ID : CVE-2025-57825 Published : Aug. 21, 2025, 4:15 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:00 a.m.9 views

WordPress 12 Step Meeting List plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress 12 Step Meeting List plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

6.5CVSS6.1AI score0.00215EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/18 8:14 a.m.8 views

BIT-SUITECRM-2025-54786 SuiteCRM: Legacy iCal service allows unauthenticated access to meeting data

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions 7.14.6 and 8.8.0, the broken authentication in the legacy iCal service allows unauthenticated access to meeting data. An unauthenticated actor can view any user's meeting calendar...

5.3CVSS7.3AI score0.00288EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/16 7:23 p.m.19 views

CVE-2025-54054

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/14 7:15 p.m.11 views

CVE-2025-54054

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.5 views

CVE-2025-54054 WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS5.2AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 6:21 p.m.26 views

CVE-2025-54054

CVE-2025-54054 : WordPress plugin “12 Step Meeting List” is affected by a Stored XSS due to improper input neutralization during web page generation. Affected versions are 12 Step Meeting List up to 3.18.3. Connected sources confirm this as a real vulnerability entry and indicate a patch exists; ...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 6:21 p.m.20 views

CVE-2025-54054 WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through = 3.18.3...

6.5CVSS0.00215EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/14 3:24 p.m.14 views

WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin 12 Step Meeting List versions = 3.18.3...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/13 5:21 a.m.8 views

CVE-2025-8882

A flaw was found in chromium-browser. A use-after-free error in the Aura rendering engine allows a remote attacker to trigger heap corruption by manipulating UI gestures through a specially crafted HTML page. This manipulation can lead to a crash or other unexpected behavior. This vulnerability...

8.8CVSS7.1AI score0.00256EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/13 5:16 a.m.7 views

CVE-2025-8881

A flaw was found in chromium-browser. A coding error within the file picker component allows a remote attacker to trigger a cross-origin data leak by manipulating user interface gestures through a specially crafted HTML page. This manipulation allows the attacker to access data from other origins...

6.5CVSS6.6AI score0.00239EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/11 12:00 a.m.21 views

The vulnerability of the meeting-join function in Cisco WebEx Meetings software allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of the meeting-join function in Cisco WebEx Meetings software is related to improper verification of certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

5.4CVSS5.5AI score0.00106EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/08 11:33 p.m.11 views

CVE-2025-54786

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions 7.14.6 and 8.8.0, the broken authentication in the legacy iCal service allows unauthenticated access to meeting data. An unauthenticated actor can view any user's meeting calendar...

5.3CVSS7AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder