Lucene search
+L

25726 matches found

Vulnrichment
Vulnrichment
•added 2025/09/09 4:25 p.m.•10 views

CVE-2025-47694 WordPress Blog Designer PRO plugin <= 3.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through = 3.4.7...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 4:25 p.m.•29 views

CVE-2025-47694 WordPress Blog Designer PRO plugin <= 3.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through = 3.4.7...

7.1CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 4:25 p.m.•12 views

CVE-2025-47695 WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through = 3.4.7...

7.5CVSS5.9AI score0.00641EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 4:25 p.m.•26 views

CVE-2025-47695 WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through = 3.4.7...

7.5CVSS0.00641EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 4:25 p.m.•45 views

CVE-2025-47695

CVE-2025-47695 affects WordPress Blog Designer PRO (plugin)

7.5CVSS5.9AI score0.00641EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 4:25 p.m.•43 views

CVE-2025-47694

CVE-2025-47694 affects the WordPress plugin Blog Designer PRO (versions up to 3.4.7). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation. Several connected sources (Red Hat, NVD/CVE entries, Patchstack, PT-Software) corro...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•20 views

xwiki-pro-macros security vulnerabilities

xwiki-pro-macros is an open source tool from XWiki SAS. It can enhance the functionality of XWiki. A security vulnerability exists in xwiki-pro-macros versions prior to 1.26.5, which stems from a lack of escaping of the width parameter and could lead to remote code execution...

10CVSS7.6AI score0.01048EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•14 views

PT-2025-36913

Name of the Vulnerable Software and Affected Versions: Premiere Pro versions 25.3 and earlier Premiere Pro version 24.6.5 Description: Premiere Pro versions 25.3 and earlier, and version 24.6.5 are susceptible to a Use After Free issue. Successful exploitation could lead to arbitrary code executi...

7.8CVSS7.2AI score0.00209EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•25 views

Adobe Premiere Pro resource management error vulnerability

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. A memory misreference vulnerability exists in Adobe Premiere Pro, which can be exploited by an attacker to cause arbitrary code to be executed in the current user environment...

7.8CVSS7.1AI score0.00209EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/09 12:00 a.m.•14 views

Adobe Premiere Pro < 24.6.8 / 25.0 < 25.4 Arbitrary code execution (APSB25-87)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 24.6.8, 25.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-87 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54242 Note that Nessus has not...

7.8CVSS6.2AI score0.00209EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/09 12:00 a.m.•12 views

Adobe Premiere Pro < 24.6.8 / 25.0 < 25.4 Arbitrary code execution (APSB25-87) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 24.6.8, 25.4. It is, therefore, affected by a vulnerability as referenced in the APSB25-87 advisory. - Use After Free CWE-416 potentially leading to Arbitrary code execution CVE-2025-54242 Note that Nessus has not...

7.8CVSS6.2AI score0.00209EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•22 views

PT-2025-36766

Name of the Vulnerable Software and Affected Versions: solwin Blog Designer PRO versions through 3.4.7 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion. This allows for the inclusion of remote files,...

7.5CVSS7.3AI score0.00641EPSS
SaveExploits0References3
Adobe
Adobe
•added 2025/09/09 12:00 a.m.•37 views

APSB25-87 : Security update available for Adobe Premiere Pro

Adobe has released updates for Adobe Premiere Pro for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution...

7.8CVSS7.9AI score0.00209EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•18 views

xwiki-pro-macros security vulnerabilities

xwiki-pro-macros is an open source tool from XWiki SAS. It can enhance the functionality of XWiki. A security vulnerability exists in xwiki-pro-macros versions prior to 1.26.5, which stems from a lack of escaping of the title parameter and could lead to remote code execution...

10CVSS7.6AI score0.00734EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•20 views

WordPress Plugin: Blog Designer PRO – Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•2 views

CVE-2025-54242: Use After Free

Premiere Pro versions 25.3, 24.6.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file, and scope is unchanged...

7.8CVSS6.4AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•9 views

CVE-2025-47695: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in solwin Blog Designer PRO blog-designer-pro.This issue affects Blog Designer PRO: from n/a through = 3.4.7...

7.5CVSS5.8AI score0.00641EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•16 views

xwiki-pro-macros security vulnerabilities

xwiki-pro-macros is an open source tool from XWiki SAS. It can enhance the functionality of XWiki. A security vulnerability exists in xwiki-pro-macros versions prior to 1.26.5, which stems from a missing escape for the ac:type parameter and could lead to remote code execution...

10CVSS7.5AI score0.00734EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•19 views

xwiki-pro-macros security vulnerabilities

xwiki-pro-macros is an open source tool from XWiki SAS. It can enhance the functionality of XWiki. A security vulnerability exists in xwiki-pro-macros versions prior to 1.26.5, which stems from a missing escape for the classes parameter and could lead to remote code execution...

10CVSS7.5AI score0.00793EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•19 views

PT-2025-36765

Name of the Vulnerable Software and Affected Versions: solwin Blog Designer PRO versions through 3.4.7 Description: The software contains an improper neutralization of input during web page generation, which may lead to cross-site scripting. Recommendations: Update solwin Blog Designer PRO to a...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References3
Rows per page
Query Builder