Lucene search
+L

1832 matches found

NVD
NVD
added 2026/01/09 12:15 p.m.7 views

CVE-2025-13854

The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' parameter of the arctext shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00232EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/09 11:15 a.m.22 views

CVE-2025-13854

CVE-2025-13854 — The Curved Text WordPress plugin is vulnerable to a stored XSS via the radius parameter of the arctext shortcode in versions up to 0.1. The Wordfence note confirms the issue arises from insufficient input sanitization/output escaping, enabling authenticated attackers with Contrib...

6.4CVSS4.8AI score0.00232EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 10:57 a.m.7 views

CVE-2022-38767

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure...

7.5CVSS7.5AI score0.01028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/09 12:0 a.m.5 views

WordPress plugin Curved Text 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. Cross-site scripting...

6.4CVSS5.8AI score0.00232EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.6 views

PT-2026-1718

Name of the Vulnerable Software and Affected Versions Curved Text versions prior to 0.1 Description The Curved Text plugin for WordPress is susceptible to Stored Cross-Site Scripting through the radius parameter of the arctext shortcode. Insufficient input sanitization and output escaping allow...

6.4CVSS5.3AI score0.00232EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/01/07 9:40 a.m.9 views

CVE-1999-0244

Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root...

7.5CVSS8.1AI score0.03025EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 4:23 p.m.8 views

CVE-2025-64282

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through = 2.2.1...

4.3CVSS5.9AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 6:30 p.m.5 views

EUVD-2025-204296

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through 2.2.1...

4.3CVSS6.5AI score0.00182EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 5:15 p.m.8 views

CVE-2025-64282

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through = 2.2.1...

4.3CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 4:18 p.m.13 views

CVE-2025-64282

CVE-2025-64282 affects the WordPress Radius Blocks plugin (Radius Blocks) up to version 2.2.1. The issue is an Insecure Direct Object References (IDOR) that enables an Authorization Bypass via a user-controlled key , due to misconfigured access control. Impact is described as bypassing access con...

4.3CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 4:18 p.m.4 views

CVE-2025-64282 WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through = 2.2.1...

4.3CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 4:18 p.m.33 views

CVE-2025-64282 WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through = 2.2.1...

4.3CVSS0.00182EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.11 views

PT-2025-52265

Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through 2.2.1...

4.3CVSS7AI score0.00182EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.5 views

WordPress plugin Radius Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00182EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2025/12/10 9:30 a.m.16 views

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.6 <=1.4.11) +51 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-model-infinispan (>=10.0.0 <=26.4.7)

org.keycloak:keycloak-model-infinispan MAVEN version =10.0.0, =0.1.0, =1.2.6, =1.2.5, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =2.0.1-23.0, =2.5.6-24.0, =0.1.0, =1.0.0 and more Source cves: CVE-2025-14082 Source advisory: SNYK:JAVA-ORGKEYCLOAK-14361675...

2.7CVSS5.8AI score0.00326EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.7 views

TencentOS Server 4: hostapd (TSSA-2025:0284)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0284 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

3.7CVSS5.1AI score0.0071EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.7 views

TencentOS Server 3: freeradius:3.0 (TSSA-2024:0764)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0764 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

9CVSS7.9AI score0.14859EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/11/06 4:41 p.m.7 views

CVE-2025-20343

A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS...

8.6CVSS6.7AI score0.00671EPSS
SaveExploits0References1
NCSC
NCSC
added 2025/11/06 12:36 p.m.9 views

Vulnerability fixed in Cisco Identity Services Engine

Cisco has fixed a vulnerability in Cisco Identity Services Engine. The vulnerability is located in the RADIUS setting of Cisco Identity Services Engine, which can be exploited by unauthenticated remote attackers. This vulnerability allows attackers to cause a logic error, potentially leading to a...

8.6CVSS6.9AI score0.00671EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/05 5:15 p.m.9 views

CVE-2025-20343

A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS...

7.5CVSS5.8AI score0.00671EPSS
SaveExploits0References1
Rows per page
Query Builder