2136 matches found
PT-2025-39402
Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The Ericsson Indoor Connect 8855 has a security issue where client-side server-side security checks can be bypassed. Successful exploitation of this issue could result in...
CVE-2025-58704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.This issue affects WP Delete User Accounts: from n/a through = 1.2.4...
CVE-2025-41716 Unauthenticated User Enumeration via Missing Authentication
The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function...
WAGO Device Sphere和WAGO Solution Builder 访问控制错误漏洞
WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder, which stems from a lack of...
WordPress WP Delete User Accounts Plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin WP Delete User Accounts versions = 1.2.4...
CVE-2025-58704
CVE-2025-58704 affects the WordPress plugin “WP Delete User Accounts” (WP Delete User Accounts). The connected Wordfence vulnerability data indicates an in‑the‑wild style issue: Stored Cross‑Site Scripting (XSS) in input during web page generation, impacting plugin versions up to 1.2.4. The CVE d...
CVE-2025-58704 WordPress WP Delete User Accounts Plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.This issue affects WP Delete User Accounts: from n/a through = 1.2.4...
CVE-2025-58704 WordPress WP Delete User Accounts Plugin <= 1.2.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.This issue affects WP Delete User Accounts: from n/a through = 1.2.4...
PT-2025-38982
Name of the Vulnerable Software and Affected Versions Ren Ventura WP Delete User Accounts versions through 1.2.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-Site Scripting XSS. This allows an...
WordPress plugin WP Delete User Accounts 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
CVE-2025-26514
StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user accounts but requires the attacker to kno...
CVE-2025-26514 CVE-2025-26514 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)
StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user accounts but requires the attacker to kno...
NetApp StorageGRID 安全漏洞
NetApp StorageGRID is a suite of object storage solutions from Network Appliance NetApp. A security vulnerability exists in NetApp StorageGRID versions prior to 11.8.0.15 and prior to 11.9.0.8, which stems from susceptibility to a reflective cross-site scripting attack that could result in viewin...
CVE-2025-36759
Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...
Linux Distros Unpatched Vulnerability : CVE-2023-41324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses...
The vulnerability of Cisco IOS XE network devices of the Catalyst 9800-CL, 9300, 9400, and 9500 series lies in improper access control. This allows attackers to bypass existing security restrictions and delete arbitrary user accounts.
The vulnerability of Cisco IOS XE network devices such as Catalyst 9800-CL, 9300, 9400, and 9500 is related to improper access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and delete arbitrary user accounts...
PT-2025-34751 · Unknown · File Station
Name of the Vulnerable Software and Affected Versions: File Station versions prior to 5.5.6.4933 Description: A NULL pointer dereference issue exists in File Station 5. A remote attacker gaining a user account can exploit this to launch a denial-of-service DoS attack. Recommendations: Update to...
CVE-2025-55299
VaulTLS is a modern solution for managing mTLS mutual TLS certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the...
Linux Distros Unpatched Vulnerability : CVE-2020-5504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own...