Lucene search
+L

3698 matches found

Cvelist
Cvelist
•added 2025/07/17 7:17 p.m.•33 views

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

6.7CVSS0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/17 12:00 a.m.•22 views

Lenovo TrackPoint Quick Menu 安全漏洞

Lenovo TrackPoint Quick Menu is a shortcut menu program from the Chinese company Lenovo. A security vulnerability exists in Lenovo TrackPoint Quick Menu, which stems from the presence of a DLL hijacking vulnerability that could lead to elevation of privilege by a local attacker...

6.7CVSS6.8AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/17 12:00 a.m.•8 views

CVE-2025-1729: Uncontrolled Search Path Element

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

6.7CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/07/11 7:00 a.m.•9 views

net_sched: qfq: Fix double list add in class with netem as child qdisc

...

7.8CVSS7.2AI score0.00227EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/07/11 7:00 a.m.•18 views

QUIC certificate check skip with wolfSSL

...

6.5CVSS7.7AI score0.00288EPSS
SaveExploits1
OSV
OSV
•added 2025/07/10 8:15 a.m.•20 views

UBUNTU-CVE-2025-38282

In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the break/unbreak mechanism but the active reference is not truly active after unbreak -- callers don't use it afterwards but it's important for...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits0References31
RedhatCVE
RedhatCVE
•added 2025/06/29 2:26 p.m.•13 views

CVE-2025-53287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS5.9AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/27 2:15 p.m.•12 views

CVE-2025-53287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/27 1:21 p.m.•36 views

CVE-2025-53287

CVE-2025-53287 affects the WordPress Quick Favicon plugin. It is a stored XSS due to improper input neutralization during web-page generation, impacting versions up to 0.22.8. Exploitation details or exact patched version are not provided in the documents; remediation is to upgrade to a version t...

5.9CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/27 1:21 p.m.•21 views

CVE-2025-53287 WordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/27 1:21 p.m.•5 views

CVE-2025-53287 WordPress Quick Favicon plugin <= 0.22.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/27 12:00 a.m.•15 views

PT-2025-27192 · Unknown · Quick Favicon

Name of the Vulnerable Software and Affected Versions: Quick Favicon versions through 0.22.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

5.9CVSS5.7AI score0.00249EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•10 views

WordPress plugin Quick Favicon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/27 12:00 a.m.•2 views

CVE-2025-53287: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robert Cummings Quick Favicon quick-favicon allows Stored XSS.This issue affects Quick Favicon: from n/a through = 0.22.8...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/06/11 3:30 p.m.•19 views

Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/06/11 3:30 p.m.•27 views

GHSA-R6XJ-43CF-9F88 Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/06/11 3:30 p.m.•24 views

Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/06/11 3:30 p.m.•23 views

GHSA-C424-HGG9-9C4W Drupal Quick Node Block Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing. This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS7.1AI score0.00268EPSS
SaveExploits0References2
NVD
NVD
•added 2025/06/11 3:15 p.m.•28 views

CVE-2025-48444

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS0.00268EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/11 3:15 p.m.•22 views

CVE-2025-48013

Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0...

5.3CVSS0.00268EPSS
SaveExploits0References1
Rows per page
Query Builder