Lucene search
+L

5131 matches found

Cvelist
Cvelist
added 2025/01/15 3:23 p.m.34 views

CVE-2025-22745 WordPress Navigation Du Lapin Blanc plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bjoerne Navigation Du Lapin Blanc navigation-du-lapin-blanc allows DOM-Based XSS.This issue affects Navigation Du Lapin Blanc: from n/a through = 1.1.1...

6.5CVSS0.0028EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/15 11:15 a.m.6 views

DEBIAN-CVE-2025-0447

Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

8.8CVSS8AI score0.00457EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/15 11:15 a.m.3 views

DEBIAN-CVE-2025-0435

Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.3AI score0.00342EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/15 10:58 a.m.1000 views

CVE-2025-0435

Google Chrome on Android (Navigation component) is affected by CVE-2025-0435 due to an inappropriate implementation that enables UI spoofing via a crafted HTML page. The issue affects versions prior to 132.0.6834.83. The practical impact is remote UI spoofing without user privileges. Remediation ...

6.5CVSS6.4AI score0.00342EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/15 12:00 a.m.17 views

PT-2025-4666 · Unknown · Navigation Du Lapin Blanc

Name of the Vulnerable Software and Affected Versions: Navigation Du Lapin Blanc versions n/a through 1.1.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

6.5CVSS9.1AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.10 views

WordPress plugin Navigation Du Lapin Blanc 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Navigation D...

6.5CVSS7.6AI score0.0028EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2025/01/14 8:00 a.m.35 views

Description of the security update for SharePoint Server Subscription Edition: January 14, 2025 (KB5002676)

None None...

7.8CVSS6.8AI score0.01807EPSS
SaveExploits0
Patchstack
Patchstack
added 2025/01/14 6:52 a.m.10 views

WordPress Navigation Du Lapin Blanc plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Navigation Du Lapin Blanc versions = 1.1.1...

6.5CVSS6.1AI score0.0028EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:00 a.m.19 views

Google Chrome < 132.0.6834.83 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 132.0.6834.83. It is, therefore, affected by multiple vulnerabilities as referenced in the 202501stable-channel-update-for-desktop14 advisory. - Inappropriate implementation in Compositing in Google Chrome prior to...

8.8CVSS6.8AI score0.05913EPSS
SaveExploits11References27
Pen Test Partners Blog
Pen Test Partners Blog
added 2025/01/09 6:20 a.m.18 views

The unexpected effects of GPS spoofing on aviation safety

GPS is one service in the Global Navigation Satellite System GNSS. Others include Russia’s GLONASS and the EU’s Galileo constellations. These are all used to provide Position, Navigation, and Timing PNT to civilian users including commercial aircraft. GPS was actually designed to have military...

7.1AI score
SaveExploits0
FreeBSD
FreeBSD
added 2025/01/09 12:00 a.m.30 views

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 9 security bugs in Chromium: CVE-2024-12693: Out of bounds memory access in V8 CVE-2024-12694: Use after free in Compositing CVE-2025-0436: Integer overflow in Skia CVE-2025-0437: Out of bounds read in Metrics CVE-2025-0438: Stack buffer overflo...

8.8CVSS8.7AI score0.00458EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
added 2024/12/26 12:00 a.m.17 views

The vulnerability of the Navigation components in Microsoft Edge and Google Chrome allows attackers to bypass existing security restrictions.

The vulnerability of the Navigation components in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

5.3CVSS5.9AI score0.0039EPSS
SaveExploits0References10Affected Software5
OSV
OSV
added 2024/12/06 10:15 p.m.7 views

CVE-2024-44854

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan...

7.5CVSS5.7AI score0.00566EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.10 views

CVE-2024-44856

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2smacplanner...

7.5CVSS5.7AI score0.00566EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.10 views

CVE-2024-41650

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2costmap2d...

9.8CVSS6.2AI score0.00473EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.12 views

CVE-2024-44853

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component computeControl...

7.5CVSS5.7AI score0.00566EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.7 views

CVE-2024-44855

Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2navfnplanner...

7.5CVSS5.7AI score0.00566EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.9 views

CVE-2024-41645

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2amcl...

9.8CVSS6.1AI score0.00677EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.8 views

CVE-2024-38927

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter /amcl dobeamskip...

9.8CVSS5.8AI score0.00571EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/06 10:15 p.m.10 views

CVE-2024-41647

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2mppicontroller...

9.8CVSS6.2AI score0.00677EPSS
SaveExploits1References3
Rows per page
Query Builder