23336 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-23035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv mlx5epriv is an unstable structure that can be memset0 if profile attaching fails. Pass netdev to...
CVE-2025-36384
creationtimestamp| type| source ---|---|--- 2026-01-30 22:26:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdodwdz3yd2h 2026-01-31 02:30:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115987356776799005 2026-02-02 06:24:24+00:00| published-proof-of-concep...
CVE-2026-1598
A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknown function of the file /dashboard/home/profile of the component User Information Module. Performing a manipulation of the argument fullname results in cross site scripting. It i...
CVE-2026-25130
creationtimestamp| type| source ---|---|--- 2026-01-30 21:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdoa42xnk52o 2026-01-31 01:20:51+00:00| seen| https://gist.github.com/alon710/6005675fc930251c9d8000c9e9ab7e40 2026-04-30 07:31:10+00:00| seen|...
CVE-2022-2290
creationtimestamp| type| source ---|---|--- 2026-01-30 21:02:55+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdo7a2hxjf2v...
CVE-2025-62348
creationtimestamp| type| source ---|---|--- 2026-01-30 19:17:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnzdytkn52x 2026-01-30 19:18:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnzemfold25...
CVE-2020-37014
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
CVE-2020-36998
Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and profile parameters. Attackers can inject malicious scripts in course code, name, description fields, and email parameter to execute arbitrary JavaScript without proper input...
CVE-2020-37014
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
CVE-2025-4686
creationtimestamp| type| source ---|---|--- 2026-01-30 16:16:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpapugze2o 2026-01-30 16:22:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnpkhhcr42g 2026-02-01 21:02:57+00:00| seen|...
CVE-2020-37014
CVE-2020-37014 affects Tryton 5.4. A persistent cross-site scripting (XSS) in the user profile name input allows remote attackers to inject script payloads, which execute in both frontend and backend user interfaces. Documented impact is a frontend/backend XSS; CVSS scores are provided (4.0: base...
CVE-2020-37014
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
CVE-2020-37014 Tryton 5.4 - Persistent Cross-Site Scripting
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
CVE-2020-37014 Tryton 5.4 - Persistent Cross-Site Scripting
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
EUVD-2020-30960
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute in the frontend and backend user...
CVE-2020-36998
Affected software: Forma.lms The E-Learning Suite 2.3.0.2. Vulnerability: Persistent cross-site scripting in multiple course and profile parameters. Details: Attackers can inject malicious scripts via course code, name, description fields, and the email parameter to execute arbitrary JavaScript d...
EUVD-2020-30962
Forma.lms The E-Learning Suite 2.3.0.2 contains a persistent cross-site scripting vulnerability in multiple course and profile parameters. Attackers can inject malicious scripts in course code, name, description fields, and email parameter to execute arbitrary JavaScript without proper input...
CVE-2026-22626
creationtimestamp| type| source ---|---|--- 2026-01-30 13:24:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnfn2g55d2m...
CVE-2026-0805
creationtimestamp| type| source ---|---|--- 2026-01-30 07:23:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrh3erny2a 2026-01-30 07:24:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmrjegeuz2o 2026-01-30 07:54:39+00:00| seen|...
WordPress profile-builder plugin < 3.11.9 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by John Castro in WordPress Plugin Profile Builder versions 3.11.9...