Lucene search
+L

925 matches found

Cvelist
Cvelist
•added 2025/10/30 6:00 a.m.•21 views

CVE-2025-10636 NS Maintenance Mode for WP <= 1.3.1 - Admin+ Stored XSS

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•0 views

CVE-2025-10636: Undefined Security Weakness

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

3.5CVSS5.9AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/28 12:15 p.m.•23 views

CVE-2025-40079

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Unable to handle kernel paging request at virtual address ffffffffa38dbf58 Current testprogs pgtable: 4K pagesize, 57-bit...

7.8CVSS0.00142EPSS
SaveExploits0References3
NVD
NVD
•added 2025/10/28 12:15 p.m.•15 views

CVE-2025-40041

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign-extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Oops1: CPU 0 Unable to handle kernel paging request at virtual address 0000000000741d58, era == 90000000851b5ac0, ra =...

7.8CVSS0.00144EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/28 11:48 a.m.•16 views

EUVD-2025-36449

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Unable to handle kernel paging request at virtual address ffffffffa38dbf58 Current testprogs pgtable: 4K pagesize, 57-bit...

5.9AI score0.00142EPSS
SaveExploits0References4
OSV
OSV
•added 2025/10/28 11:48 a.m.•9 views

CVE-2025-40041 LoongArch: BPF: Sign-extend struct ops return values properly

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign-extend struct ops return values properly The nsbpfqdisc selftest triggers a kernel panic: Oops1: CPU 0 Unable to handle kernel paging request at virtual address 0000000000741d58, era == 90000000851b5ac0, ra =...

7.8CVSS6.3AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/23 6:19 a.m.•22 views

CVE-2025-10638

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address...

5.3CVSS6.8AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/22 1:15 p.m.•11 views

AZL-68675 CVE-2025-11411 affecting package unbound for versions less than 1.19.1-5

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS5.7AI score0.0033EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•0 views

CVE-2025-10638: Undefined Security Weakness

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address...

5.3CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•0 views

CVE-2025-11411: Acceptance of Extraneous Untrusted Data With Trusted Data

NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...

7.1CVSS5.7AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2017-7381

Malware in sbrugna...

9.8CVSS9.5AI score0.03398EPSS
SaveExploits4References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-0319

Malware in sbrugna...

4.3CVSS6.1AI score0.01355EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-6538

Malware in sbrugna...

7.5CVSS6.9AI score0.0265EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2003-1115

Malware in sbrugna...

5CVSS6.4AI score0.01157EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-2147

Malware in sbrugna...

5.8CVSS6.3AI score0.01299EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-3176

Malware in sbrugna...

10CVSS9.5AI score0.03356EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2018-18371

Malware in sbrugna...

9.8CVSS9.5AI score0.01649EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-1071

Malware in sbrugna...

5CVSS6.9AI score0.13066EPSS
SaveExploits1References17
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2006-2146

Malware in sbrugna...

6.4CVSS6.4AI score0.01364EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-21753

Malware in sbrugna...

6.8CVSS6.5AI score0.00197EPSS
SaveExploits0References2
Rows per page
Query Builder