CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3645 matches found

Patchstack•added 2025/08/27 7:03 p.m.•11 views

WordPress Podlove Podcast Publisher Plugin <= 4.2.5 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Podlove Podcast Publisher versions = 4.2.5...

4.7CVSS6.7AI score0.0021EPSS

SaveExploits0Affected Software1

NVD•added 2025/08/27 6:15 p.m.•13 views

CVE-2025-58204

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress allows Phishing.This issue affects Podlove Podcast Publisher: from n/a through = 4.2.5...

4.7CVSS0.0021EPSS

SaveExploits0References1

CVE•added 2025/08/27 5:45 p.m.•46 views

CVE-2025-58204

CVE-2025-58204 is an open redirect vulnerability in the Podlove Podcast Publisher WordPress plugin (affected: versions through 4.2.5). The issue allows phishing via redirection to untrusted sites. Public sources (PT-2025-34918, Patchstack) describe the same open redirect condition and recommend u...

4.7CVSS5.9AI score0.0021EPSS

SaveExploits0References1

Cvelist•added 2025/08/27 5:45 p.m.•21 views

CVE-2025-58204 WordPress Podlove Podcast Publisher Plugin <= 4.2.5 - Open Redirection Vulnerability

4.7CVSS0.0021EPSS

SaveExploits0References1

CNNVD•added 2025/08/27 12:00 a.m.•11 views

WordPress plugin Podlove Podcast Publisher 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. An input validation error...

4.7CVSS6.5AI score0.0021EPSS

SaveExploits0References2

Positive Technologies•added 2025/08/27 12:00 a.m.•15 views

PT-2025-34918 · Unknown · Podlove Podcast Publisher

Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher versions through 4.2.5 Description: The software contains an open redirect vulnerability that could allow phishing attacks. The vulnerability involves redirecting users to untrusted sites. Recommendations: Update...

4.7CVSS6.4AI score0.0021EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2025/08/27 12:00 a.m.•2 views

CVE-2025-58204: URL Redirection to Untrusted Site

4.7CVSS5.8AI score0.0021EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/21 8:36 p.m.•14 views

CVE-2025-43744

A stored DOM-based Cross-Site Scripting XSS vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19 and...

5.1CVSS5.8AI score0.00182EPSS

SaveExploits0References1

RedhatCVE•added 2025/08/21 3:38 p.m.•17 views

CVE-2025-9144

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisheredit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be...

5.4CVSS6.7AI score0.00362EPSS

SaveExploits1References1

Snyk•added 2025/08/19 9:30 p.m.•6 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the getLanguage and getClassTypeFields functions used by the Asset Publisher configuration UI. An attacker can execute arbitrary JavaScript in the context of the user's browser by injecting malicious inp...

5.4CVSS5.5AI score0.00182EPSS

SaveExploits0References2

Github Security Blog•added 2025/08/19 9:30 p.m.•18 views

Liferay Portal Vulnerable to Cross-Site Scripting via DDM Structure Field Labels

5.4CVSS5.7AI score0.00182EPSS

SaveExploits0References6Affected Software1

OSV•added 2025/08/19 9:30 p.m.•19 views

GHSA-M49P-6CJP-X2H3 Liferay Portal Vulnerable to Cross-Site Scripting via DDM Structure Field Labels

5.1CVSS5.7AI score0.00182EPSS

SaveExploits0References6

Snyk•added 2025/08/19 9:30 p.m.•7 views

Cross-site Scripting (XSS)

5.4CVSS5.5AI score0.00182EPSS

SaveExploits0References2

OSV•added 2025/08/19 8:15 p.m.•11 views

CVE-2025-43744

5.4CVSS5.9AI score

SaveExploits0References1

NVD•added 2025/08/19 8:15 p.m.•22 views

CVE-2025-43744

5.4CVSS0.00182EPSS

SaveExploits0References1

Cvelist•added 2025/08/19 7:34 p.m.•21 views

CVE-2025-43744

5.1CVSS0.00182EPSS

SaveExploits0References1

CVE•added 2025/08/19 7:34 p.m.•41 views

CVE-2025-43744

A stored, DOM-based XSS in Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2024–2025 (various Qx updates) via the Asset Publisher UI in Source.js, allowing JavaScript injection through DDM structure field labels inserted into the DOM via innerHTML without proper encoding. Impact is client-side XSS...

5.4CVSS5.7AI score0.00182EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2025/08/19 7:34 p.m.•5 views

CVE-2025-43744

5.1CVSS5.7AI score0.00182EPSS

SaveExploits0References1

NVD•added 2025/08/19 3:15 p.m.•29 views

CVE-2025-9144

5.4CVSS0.00362EPSS

SaveExploits1References5

Cvelist•added 2025/08/19 3:02 p.m.•32 views

CVE-2025-9144 Scada-LTS publisher_edit.shtm cross site scripting

5.1CVSS0.00362EPSS

SaveExploits1References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by