1817 matches found
CVE-2026-66584
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
CVE-2026-66584
An unauthenticated Cross-Site Scripting (XSS) vulnerability affects the WordPress plugin 12 Step Meeting List in versions 3.19.16 and earlier , as reported by researcher V1T via PatchStack. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ne...
CVE-2026-66584 WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
EUVD-2026-64830
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting
Code for Recovery 12 Step Meeting List versions up to 3.14.33 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft a malicious URL. id:...
WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin 12 Step Meeting List versions = 3.19.16...
CVE-2026-53614
A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...
vim: Vim: Arbitrary code execution via crafted step-definition patterns
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: dapr, kyverno-policy-reporter-ui-fips, caddy-fips, gogatekeeper, step-issuer-fips, rclone-fips, step-issuer, step-ca-fips, step-ca, buf, caddy, sftpgo, cloudflared, karma, dapr-fips, tkn, kyverno-policy-reporter-ui, gitness, telegraf, step-fips, tkn-fips, step, rclon...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca-fips, caddy, step-fips, caddy-fips, step-ca, step, step-issuer-fips...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca-fips, caddy, step-fips, caddy-fips, step-ca, step, step-issuer-fips...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.2, caddy, step-ca-fips, frankenphp-8.3, caddy-fips, frankenphp-8.4, frankenphp-8.5, step-issuer-fips...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-google-cas-issuer-fips, cert-manager-webhook-pdns-fips, cert-manager-istio-csr, percona-xtradb-cluster-operator, step-issuer-fips, step-issuer, opentelemetry-operator-fips, mariadb-operator, gitlab-operator-fips,...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: cert-exporter-fips, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, step-issuer, cert-manager-istio-csr, cert-manager-cmctl-fips, aws-privateca-issuer, aws-privateca-issuer-fips, cert-manager-cmctl, cert-exporter, step-issuer-fips...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: argo-workflows, trillian-fips, caddy, caddy-fips, argo-workflows-fips, step-ca, trillian, step, kots, wavefront-collector-for-kubernetes...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, caddy-fips, google-osconfig-agent, opa, smarter-device-manager-fips, spark-operator, portieris, step-issuer-fips, kube-bench-fips, nfs-subdir-external-provisioner, amass, kyverno-notation-aws-fips, spark-operator-fips, step-issuer,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: step, kaniko, minio, kwok, k8sgpt-operator, trivy, conftest, grafana-mimir, opentelemetry-collector-contrib, vcluster, rqlite, pulumi-language-dotnet, spegel, grpc-health-probe, tflint, tempo, kargo, zot, gomplate, hubble-ui, kube-rbac-proxy, dagger, dex, zarf,...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: caddy, step-ca, step-issuer, step...