Lucene search
+L

3084 matches found

NVD
NVD
•added 2025/09/09 5:16 p.m.•10 views

CVE-2025-5500

A flaw has been found in ZhenShi Mibro Fit App 1.6.3.17499 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.xiaoxun.xunoversea.mibrofit. This manipulation causes improper export of android application components. The attack requires local access. T...

5.3CVSS0.00135EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/09/07 2:32 p.m.•16 views

CVE-2025-58839

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through = 1.2...

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/05 10:26 p.m.•28 views

CVE-2025-9929

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS5.7AI score0.00308EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/05 2:15 p.m.•12 views

CVE-2025-58839

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through = 1.2...

7.2CVSS0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/05 1:45 p.m.•22 views

CVE-2025-58839 WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through = 1.2...

7.2CVSS0.00467EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/05 1:45 p.m.•29 views

CVE-2025-58839

CVE-2025-58839 describes a deserialization of untrusted data vulnerability in the WordPress plugin “eDS Responsive Menu” (versions up to and including 1.2). The underlying issue is PHP Object Injection triggered by deserializing untrusted data, enabling an attacker to manipulate objects during ru...

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/05 1:45 p.m.•7 views

CVE-2025-58839 WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through = 1.2...

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/05 1:33 p.m.•17 views

WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Drew / mcdruid in WordPress Plugin eDS Responsive Menu versions = 1.2...

7.2CVSS7AI score0.00467EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•6 views

CVE-2025-58839: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through = 1.2...

7.2CVSS5.8AI score0.00467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•16 views

PT-2025-36178

Name of the Vulnerable Software and Affected Versions: eDS Responsive Menu versions through 1.2 Description: A deserialization of untrusted data issue exists in eDS Responsive Menu, allowing object injection. This can occur due to the deserialization of untrusted data. Recommendations: At the...

7.2CVSS6.2AI score0.00467EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•13 views

WordPress plugin eDS Responsive Menu 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS6.8AI score0.00467EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/04 10:42 a.m.•24 views

CVE-2025-9929

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS4.2AI score0.00308EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/04 10:42 a.m.•29 views

CVE-2025-9929

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS0.00308EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•3 views

CVE-2025-9929: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS4.1AI score0.00308EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/09/03 9:32 p.m.•32 views

CVE-2025-9929 code-projects Responsive Blog Site blogs_view.php cross site scripting

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS0.00308EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/30 1:15 p.m.•10 views

CVE-2025-9688

A security vulnerability has been detected in Mupen64Plus up to 2.6.0. The affected element is the function writeisviewer of the file src/device/cart/isviewer.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The attack is considered to have high...

5.1CVSS0.0028EPSS
SaveExploits0References5
OSV
OSV
•added 2025/08/28 7:15 p.m.•20 views

CVE-2025-9579

A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/sethidessidcfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been ma...

8.8CVSS5.7AI score0.05706EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/28 6:02 p.m.•36 views

CVE-2025-9576

CVE-2025-9576 concerns Seeedstudio ReSpeaker LinkIt7688, where an Administrative Interface function handling the file "/etc/shadow" can be manipulated to enable default-credential use. Exploitation requires local access and is described as high-complexity with low exploitability in the public mat...

7CVSS3.6AI score0.00217EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/28 12:36 p.m.•20 views

CVE-2025-48316 WordPress Responsive Mobile-Friendly Tooltip plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ItayXD Responsive Mobile-Friendly Tooltip responsive-mobile-friendly-tooltip allows Stored XSS.This issue affects Responsive Mobile-Friendly Tooltip: from n/a through = 1.6.6...

6.5CVSS0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•3 views

CVE-2025-48316: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ItayXD Responsive Mobile-Friendly Tooltip responsive-mobile-friendly-tooltip allows Stored XSS.This issue affects Responsive Mobile-Friendly Tooltip: from n/a through = 1.6.6...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Rows per page
Query Builder