Lucene search
K

13008 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/30 4:55 p.m.2 views

Malicious code in kibana-release-notes (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
Exploits0
OSV
OSV
added 2025/01/30 4:55 p.m.4 views

MAL-2025-669 Malicious code in kibana-release-notes (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/01/30 12:0 a.m.7 views

Granola Notes Detection

Binary data 701500.prm...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2025/01/27 12:0 a.m.5 views

Fedora: Security Advisory (FEDORA-2025-b28759cb95)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References3
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.3 views

WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels versions = 4.7.1...

5.9CVSS5.8AI score0.00194EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/22 12:0 a.m.3 views

PT-2025-4769 · Undefined · Undefined

🔗 Learn more about VeraCrypt 1.26.18: 📄 Release notes: https://t.co/qmv5Rfuwsq ⬇️ Downloads: https://t.co/9eL9CyrREh 🙏 CVE-2024-54187: Collaboration between @ tfr & @idrassi 🙏 CVE-2025-23021: Reported by @ tfr 🛠️ Fixes implemented by @idrassi More details soon...

7.3AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/01/21 5:55 p.m.29 views

Moderate: Red Hat Security Advisory: JBoss EAP XP 5.0 Update 1.0 release. See references for release notes.

JBoss EAP XP 5.0 Update 1.0 release. See references for release notes. JBoss EAP XP 5.0 Update 1.0 GA release. See references for release notes. Security Fixes: io.vertx/vertx-grpc: Vertx gRPC server does not limit the maximum message size CVE-2024-8391 For more details about the security issues,...

7.5CVSS7.1AI score0.00361EPSS
Exploits0References26
NVD
NVD
added 2025/01/16 8:15 p.m.5 views

CVE-2025-23715

Cross-Site Request Forgery CSRF vulnerability in RaymondDesign Post & Page Notes post-page-notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through = 0.1.1...

7.1CVSS0.00205EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/01/16 8:15 p.m.9 views

CVE-2025-23715

Cross-Site Request Forgery CSRF vulnerability in RaymondDesign Post & Page Notes post-page-notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through = 0.1.1...

7.1CVSS7.2AI score0.00205EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/01/16 8:6 p.m.11 views

CVE-2025-23715 WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in RaymondDesign Post & Page Notes post-page-notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through = 0.1.1...

7.1CVSS8.6AI score0.00205EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/16 8:6 p.m.14 views

CVE-2025-23715 WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in RaymondDesign Post & Page Notes post-page-notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through = 0.1.1...

7.1CVSS0.00205EPSS
Exploits0References1
CVE
CVE
added 2025/01/16 8:6 p.m.51 views

CVE-2025-23715

CVE-2025-23715 is a CSRF-based vulnerability affecting RaymondDesign Post & Page Notes. The connected Red Hat entry confirms the issue and states that the CSRF allows Stored XSS in Post & Page Notes, affecting versions up to 0.1.1 (and n/a to 0.1.1 as described). Public references point to the Po...

7.1CVSS7.2AI score0.00205EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.7 views

WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Post & Page Notes versions = 0.1.1...

7.1CVSS6AI score0.00205EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.3 views

PT-2025-5046 · Unknown · Raymonddesign Post & Page Notes

Name of the Vulnerable Software and Affected Versions: RaymondDesign Post & Page Notes versions 0.1.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

7.1CVSS9.1AI score0.00205EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.9 views

WordPress plugin Post & Page Notes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin Post & Pa...

7.1CVSS7.8AI score0.00205EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.2 views

PT-2025-5624 · Undefined · Undefined

@BleepinComputer @LawrenceAbrams Please note there is a typo on the related Visual Studio 17.12.4 release notes: https://t.co/Wd5b44oh6y "Carriage-return character in remote URL allows malicious repository to leak credentials CVE-2025-50338" should be "CVE-2024-50338" https://t.co/OXgtTiyqyK...

7.4CVSS9.3AI score0.00152EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/01/09 6:49 p.m.18 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

7.5CVSS6.7AI score0.04299EPSS
Exploits0References12
Slackware Linux
Slackware Linux
added 2025/01/09 1:14 a.m.8 views

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

7.4AI score
Exploits0
CNNVD
CNNVD
added 2024/12/24 12:0 a.m.1 views

WordPress plugin Print Invoice & Delivery Notes for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS7.7AI score0.00133EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/24 12:0 a.m.2 views

PT-2024-17487 · WordPress · Print Invoice & Delivery Notes For Woocommerce

Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce plugin for WordPress versions up to, and including, 5.4.0 Description: The issue is due to a missing capability check on the wcdn remove shoplogo AJAX action. This makes it possible for...

4.3CVSS9.3AI score0.00133EPSS
Exploits0References7
Rows per page
Query Builder