Lucene search
+L

2614 matches found

Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•25 views

PT-2025-16282 · WordPress · Ts Poll – Survey

Name of the Vulnerable Software and Affected Versions: TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress versions up to, and including, 2.4.6 Description: The issue concerns SQL Injection via the s parameter due to insufficient escaping on the user-supplied parameter and...

4.9CVSS6.3AI score0.00406EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•7 views

CVE-2025-3470: Improper Neutralization of Special Elements used in an SQL Command

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and including, 2.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.7AI score0.00406EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/14 12:00 a.m.•21 views

WordPress plugin TS Poll SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

4.9CVSS6.7AI score0.00406EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•14 views

Vulnerability of the xgbe_rx_poll() function in the drivers/net/ethernet/amd/xgbe/xgbe-drv.c module – This driver is a network adapter driver for AMD Ethernet in Linux kernels. It allows a hacker to cause a service failure.

Vulnerability of the xgberxpoll function in the drivers/net/ethernet/amd/xgbe/xgbe-drv.c module – The Ethernet adapter driver for Linux kernel is vulnerable due to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.7AI score0.00648EPSS
SaveExploits0References23Affected Software4
RedhatCVE
RedhatCVE
•added 2025/04/13 4:40 p.m.•44 views

CVE-2025-32070

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

5.4CVSS6.5AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 5:15 p.m.•20 views

CVE-2025-32070

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

5.4CVSS0.00225EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/11 4:20 p.m.•30 views

CVE-2025-32070 XSSes in AJAXPoll

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

0.00225EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/11 4:20 p.m.•11 views

CVE-2025-32070 XSSes in AJAXPoll

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

6.1AI score0.00225EPSS
SaveExploits0References2
Mend
Mend
•added 2025/04/11 4:20 p.m.•3 views

CVE-2025-32070

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

10CVSS0.00225EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/11 4:20 p.m.•73 views

CVE-2025-32070

The MediaWiki - AJAX Poll Extension is vulnerable to Cross-Site Scripting (XSS) due to an Improper Input Validation vulnerability. This issue affects versions 1.39 through 1.43 . An attacker could potentially execute malicious scripts in a user's browser session. To remediate this, users are reco...

5.4CVSS6.1AI score0.00225EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/11 12:00 a.m.•13 views

MediaWiki 输入验证错误漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the Wikimedia USA Foundation. The product can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki - AJAX Poll Extension versions 1.39 through 1.43...

5.4CVSS6.2AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/11 12:00 a.m.•5 views

CVE-2025-32070: Improper Input Validation

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43...

5.4CVSS5.8AI score0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/11 12:00 a.m.•17 views

PT-2025-16134 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - AJAX Poll Extension versions 1.39 through 1.43 Description: The issue is related to Improper Input Validation, which allows Cross-Site Scripting XSS in the Mediawiki - AJAX Poll Extension. Recommendations: For versions 1.39 throug...

5.4CVSS5.6AI score0.00225EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/04/03 9:33 p.m.•12 views

CVE-2025-31612

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through = 2.0.4...

9.8CVSS7.2AI score0.00716EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 9:15 p.m.•19 views

CVE-2025-31612

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through = 2.0.4...

9.8CVSS0.00716EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 8:58 p.m.•32 views

CVE-2025-31612 WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through = 2.0.4...

9.8CVSS0.00716EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/01 8:58 p.m.•9 views

CVE-2025-31612 WordPress CBX Poll plugin <= 2.0.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through = 2.0.4...

9.8CVSS8.6AI score0.00716EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/01 4:15 p.m.•15 views

UBUNTU-CVE-2025-21902

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS6.5AI score0.00205EPSS
SaveExploits0References10
OSV
OSV
•added 2025/04/01 3:40 p.m.•13 views

CVE-2025-21902 acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

6AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•18 views

WordPress plugin CBX Poll 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS8.6AI score0.00716EPSS
SaveExploits0References1
Rows per page
Query Builder