Lucene search
+L

15479 matches found

Microsoft KB
Microsoft KB
•added 2025/08/19 12:00 a.m.•31 views

August 19, 2025—KB5066188 (OS Builds 19044.6218 and 19045.6218) Out-of-band

None None...

7.8CVSS7AI score0.0055EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-38372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling xastore and xaerase were used without holding the proper lock, which led to a lockdep warning due t...

7.8CVSS6.2AI score0.00174EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2025/08/19 12:00 a.m.•29 views

August 19, 2025—KB5066187 (OS Build 17763.7683) Out-of-band

None None...

7.8CVSS7AI score0.0055EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/18 6:29 a.m.•35 views

CVE-2025-8113

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

6.1CVSS6.5AI score0.00222EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2021-41092

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running docker login...

7.5CVSS6.1AI score0.01652EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/08/18 12:00 a.m.•26 views

Medical Store Management System UpdateMedicines.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. Medical Store Management System suffers from a SQL injection vulnerability that originates from a misuse of the parameter productNameTxt in the file UpdateMedicines.java resulting in a SQL injection attack, which can be exploited by...

8.8CVSS6.8AI score0.00407EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/18 12:00 a.m.•19 views

Medical Store Management System MainPanel.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. Medical Store Management System has a SQL injection vulnerability that originates from improper filtering of searchTxt parameters in the MainPanel.java file, which can be exploited by an attacker to obtain sensitive information...

8.8CVSS6.9AI score0.00407EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•18 views

CVE-2025-54702

Cross-Site Request Forgery CSRF vulnerability in motov.net Ebook Store ebook-store allows Cross Site Request Forgery.This issue affects Ebook Store: from n/a through = 5.8013...

4.3CVSS5.9AI score0.00132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•13 views

CVE-2025-52720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in highwarden Super Store Finder superstorefinder-wp allows SQL Injection.This issue affects Super Store Finder: from n/a through = 7.5...

9.3CVSS5.9AI score0.00292EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/08/16 6:15 a.m.•19 views

CVE-2025-8113

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

6.1CVSS5.8AI score0.00222EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/16 6:15 a.m.•21 views

CVE-2025-8113

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

6.1CVSS0.00222EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/16 6:00 a.m.•31 views

CVE-2025-8113 Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

0.00222EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/16 6:00 a.m.•12 views

CVE-2025-8113 Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

6.4AI score0.00222EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/16 6:00 a.m.•58 views

CVE-2025-8113

The Ebook Store WordPress plugin versions prior to 5.8015 are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to escape the $_SERVER['REQUEST_URI'] parameter before it is outputted back in an attribute. This flaw could allow an attacker to execute malicious scri...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/16 3:31 a.m.•28 views

CVE-2025-8931

A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

8.8CVSS7.7AI score0.00407EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/16 3:31 a.m.•26 views

CVE-2025-8930

A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of the component Update Company Page. The manipulation of the argument companyNameTxt leads to sql injection. The attack may be initiated...

8.8CVSS7.7AI score0.00407EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/16 12:00 a.m.•23 views

PT-2025-33537

Name of the Vulnerable Software and Affected Versions: The Ebook Store WordPress plugin versions prior to 5.8015 Description: The Ebook Store WordPress plugin does not escape the $ SERVER'REQUEST URI' parameter before outputting it, potentially leading to Reflected Cross-Site Scripting in older w...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•22 views

WordPress plugin EBook Store has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS6.1AI score0.00222EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/16 12:00 a.m.•11 views

CVE-2025-8113: Undefined Security Weakness

The Ebook Store WordPress plugin before 5.8015 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

6.1CVSS5.9AI score0.00222EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/16 12:00 a.m.•15 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access to the cgroup local store, which could lead to the execution of arbitrary code...

7.1CVSS8.2AI score0.00177EPSS
SaveExploits1References3
Rows per page
Query Builder