CVE-2025-5325: Improper Neutralization of Special Elements Used in a Template Engine

A vulnerability has been found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adpweb/a/ica/api/service/rfa/testService. The manipulation leads to improper neutralization of...

CVE-2025-1461 Vuetify XSS through 'eventMoreText' prop of VCalendar

Improper neutralization of the value of the 'eventMoreText' property of the 'VCalendar' component in Vuetify allows unsanitized HTML to be inserted into the page. This can lead to a Cross-Site Scripting XSS https://owasp.org/www-community/attacks/xss attack. The vulnerability occurs because the...

CVE-2025-23393

A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in spacewalk-java allows execution of arbitrary Javascript code on users machines.This issue affects Container suse/manager/5.0/x8664/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; SUSE Manager...

CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-38866

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

DEBIAN-CVE-2024-38866

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

UBUNTU-CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-38866 Livestatus Injection in dynmaps

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

CVE-2024-38866: Improper Neutralization of Delimiters

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. A security vulnerability exists in Nagvis versions prior to 1.9.47 that stems from improper input neutralization and could lead to a cross-site scripting attack...

CVE-2025-5265: Improper Neutralization of Special Elements used in a Command

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.. Th...

PT-2025-22970 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.47 Description: The issue is related to the improper neutralization of input in Nagvis, which can lead to XSS. Recommendations: For versions prior to 1.9.47, update to version 1.9.47 or later to resolve the issue...

Trend Micro Apex Central getBlock() Code Execution

The vulnerability of the getBlock function in the Trend Micro Apex Central security monitoring and management tool is related to the failure to take measures to neutralize specific elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-1985

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

SUSE Manager Server 安全漏洞

SUSE Manager Server is an infrastructure management solution from SUSE Germany designed to simplify and secure the management of various Linux distributions. A security vulnerability exists in SUSE Manager Server versions prior to 5.0 that stems from improper neutralization and could lead to...

CVE-2025-46493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Stored XSS.This issue affects Crossword Compiler Puzzles: from n/a through = 14.5...

CVE-2025-47673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.16...

CVE-2025-47611

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Khaled User Meta user-meta allows Reflected XSS.This issue affects User Meta: from n/a through = 3.1.2...

CVE-2025-46537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through = 3.3.1...

CVE-2025-48245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issue affects Quick Contact Form: from n/a through = 8.2.1...