Lucene search
K

35 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.2 views

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.0.1)

The version of AHV installed on the remote host is prior to AHV-10.0.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.0.1 advisory. - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Respons...

9CVSS7.8AI score0.22611EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2026/01/15 6:22 a.m.4 views

CVE-2025-14464

The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...

5.3CVSS6.1AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/01/14 6:15 a.m.6 views

CVE-2025-14464

The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...

5.3CVSS0.00064EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/14 5:28 a.m.2 views

CVE-2025-14464 PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials

The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...

5.3CVSS5.7AI score0.00064EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/14 5:28 a.m.19 views

CVE-2025-14464 PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials

The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...

5.3CVSS0.00064EPSS
Exploits0References3
CVE
CVE
added 2026/01/14 5:28 a.m.9 views

CVE-2025-14464

CVE-2025-14464 : The PDF Resume Parser plugin for WordPress (versions ≤ 1.0) exposes SMTP credentials via an unauthenticated AJAX action, enabling an attacker to retrieve sensitive configuration data. This could lead to compromise of email accounts and potentially other systems using the same cre...

5.3CVSS5.7AI score0.00064EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.2 views

WordPress plugin PDF Resume Parser 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has a PHP and MySQL based on the server set up a personal blog site features. WordPress plugin is an application plug-ins. WordPress plugin...

5.3CVSS6.2AI score0.00064EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.4 views

PT-2026-2812

The PDF Resume Parser plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0. This is due to the plugin registering an AJAX action handler that is accessible to unauthenticated users and exposes SMTP configuration data including credentials...

5.3CVSS6AI score0.00064EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/13 10:23 p.m.6 views

WordPress PDF Resume Parser plugin <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials vulnerability

Unauthenticated Sensitive Information Disclosure in SMTP Credentials vulnerability discovered by Ivan Cese in WordPress Plugin PDF Resume Parser versions = 1.0...

5.3CVSS6.6AI score0.00064EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/08/11 1:52 p.m.5 views

BIT-LIBPYTHON-2024-50602

An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an unstarted parser...

5.9CVSS7.1AI score0.00127EPSS
Exploits0References10
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.4 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1213)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS8.1AI score0.00127EPSS
Exploits0References2
Amazon
Amazon
added 2025/04/16 12:0 a.m.3 views

Medium: thunderbird

Issue Overview: There exists an out of bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when doing JPEG recompression i.e. if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds i...

9.8CVSS7.2AI score0.1436EPSS
Exploits1
OSV
OSV
added 2025/03/31 2:22 p.m.1 views

SUSE-SU-2025:20258-1 Security update for expat

This update for expat fixes the following issues: -CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232579...

5.9CVSS6.9AI score0.00127EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/03/31 2:22 p.m.2 views

Security update for expat

This update for expat fixes the following issues: -CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232579. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for you...

5.6CVSS7.3AI score0.00127EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/02/03 9:9 a.m.3 views

Security update for expat

This update for expat fixes the following issues: CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XMLResumeParser bsc1232579. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

8.2CVSS7.3AI score0.00127EPSS
Exploits0References4
OSV
OSV
added 2025/02/03 9:9 a.m.1 views

SUSE-SU-2025:20086-1 Security update for expat

This update for expat fixes the following issues: - CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XMLResumeParser bsc1232579...

5.9CVSS6.9AI score0.00127EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2024/12/23 1:12 p.m.1 views

Security update for mozjs78

This update for mozjs78 fixes the following issues: CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for you...

5.6CVSS7.7AI score0.00127EPSS
Exploits0References4
OSV
OSV
added 2024/12/23 1:12 p.m.9 views

SUSE-SU-2024:4412-1 Security update for mozjs78

This update for mozjs78 fixes the following issues: - CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599...

5.9CVSS6.3AI score0.00127EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2024/12/17 6:55 p.m.3 views

libexpat: expat: DoS via XML_ResumeParser

A security issue was found in Expat libexpat. A crash can be triggered in the XMLResumeParser function due to XMLStopParser's ability to stop or suspend an unstarted parser, which can lead to a denial of service...

5.9CVSS7.2AI score0.00127EPSS
Exploits0References5
OSV
OSV
added 2024/11/25 4:51 p.m.3 views

CLSA-2024-1732553483 expat: Fix of CVE-2024-50602

CVE-2024-50602: Fix crash in XMLResumeParser by preventing XMLStopParser from stopping/suspending unstarted parser...

5.9CVSS6.9AI score0.00127EPSS
Exploits0References1
Rows per page
Query Builder