Lucene search
+L

670 matches found

RedhatCVE
RedhatCVE
•added 2026/01/01 9:12 a.m.•24 views

CVE-2025-62146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks mx-time-zone-clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through = 5.1.1...

6.5CVSS5.9AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 9:15 a.m.•21 views

CVE-2025-62146

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks mx-time-zone-clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through = 5.1.1...

6.5CVSS0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 8:47 a.m.•38 views

CVE-2025-62146 WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks mx-time-zone-clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through = 5.1.1...

6.5CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 8:47 a.m.•36 views

CVE-2025-62146

CVE-2025-62146 affects MX Time Zone Clocks (WordPress plugin) up to version 5.1.1. The issue is a Stored Cross-Site Scripting vulnerability arising from improper input handling during web page generation. The Wordfence entry lists the vulnerability as requiring Contributor+ privileges and notes t...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 8:47 a.m.•15 views

EUVD-2025-205912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through 5.1.1...

6.5CVSS5.5AI score0.00169EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 8:47 a.m.•8 views

CVE-2025-62146 WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through 5.1.1...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 8:46 a.m.•14 views

WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin MX Time Zone Clocks versions = 5.1.1...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•13 views

WordPress plugin MX Time Zone Clocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•3 views

CVE-2025-62146: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks mx-time-zone-clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through = 5.1.1...

6.5CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•19 views

PT-2025-54292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through 5.1.1...

6.5CVSS6AI score0.00169EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/11/24 12:00 a.m.•46 views

Tenda AC21 SetSysTimeCfg File Stack Buffer Overflow Vulnerability

Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...

9.8CVSS8.4AI score0.03881EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/20 3:30 p.m.•23 views

EUVD-2025-198252

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9CVSS6.8AI score0.03881EPSS
SaveExploits1References8
NVD
NVD
•added 2025/11/20 3:17 p.m.•23 views

CVE-2025-13446

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9.8CVSS0.03881EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/11/20 2:32 a.m.•33 views

CVE-2025-13446 Tenda AC21 SetSysTimeCfg stack-based overflow

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...

9CVSS0.03881EPSS
SaveExploits1References7
CVE
CVE
•added 2025/11/20 2:32 a.m.•44 views

CVE-2025-13446

CVE-2025-13446 affects the Tenda AC21 router. The vulnerability exists in the /goform/SetSysTimeCfg handler, where improper validation of the timeZone/time input leads to a stack-based buffer overflow. This can be exploited remotely without user interaction, enabling arbitrary code execution or a...

9.8CVSS8.2AI score0.03881EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•37 views

PT-2025-47551

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description A flaw exists in Tenda AC21 version 16.03.08.16 related to a stack-based buffer overflow. The issue is located in the file /goform/SetSysTimeCfg. The timeZone/time argument can be manipulated to trigg...

9.8CVSS8.2AI score0.03881EPSS
SaveExploits1References16
NVD
NVD
•added 2025/11/01 7:15 p.m.•17 views

CVE-2025-12603

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

9.8CVSS0.00299EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/01 6:56 p.m.•45 views

CVE-2025-12603

CVE-2025-12603 concerns Azure Access Technology BLU-IC2 and BLU-IC4 devices where the /etc/timezone file can be written arbitrarily. Multiple sources (NVD/CNVD/CVELIST) concur that this affects BLU-IC2 and BLU-IC4 up to version 1.19.5. PT Security specifies that the vulnerability allows arbitrary...

9.8CVSS5.8AI score0.00299EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/01 12:25 a.m.•28 views

CVE-2025-63458

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.00397EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/31 7:15 p.m.•16 views

CVE-2025-63458

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.00397EPSS
SaveExploits1References1
Rows per page
Query Builder