31 matches found
CVE-2018-25301
Easy MPEG to DVD Burner 1.7.11 contains a local SEH-based buffer overflow in the username handling that can enable local code execution by crafting a payload (junk data, SEH chain pointers, and shellcode) to overwrite the SEH handler and redirect execution (e.g., to run calc.exe). This CVE’s imp...
Easy MPEG to DVD Burner 安全漏洞
Easy MPEG to DVD Burner is a multi-format video processing software developed by Easy MPEG, capable of burning MPEG videos onto DVDs. Version 1.7.11 of Easy MPEG to DVD Burner contains a security vulnerability. This vulnerability stems from improper handling of structured exceptions, which can le...
PT-2026-35984
Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling SEH local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode tha...
EUVD-2023-12815
Malicious code in bioql PyPI...
EUVD-2022-51945
Malicious code in bioql PyPI...
WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance versions = 1.7.11...
CVE-2025-58607
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...
CVE-2025-58607 WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...
CVE-2025-58607
CVE-2025-58607 is a stored XSS in the WordPress plugin “Cookie Notice & Consent Banner for GDPR & CCPA Compliance” (versions
CVE-2025-58607 WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...
WordPress plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance 跨站脚本漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Cookie...
CVE-2023-47758
Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...
SUSE-SU-2025:20091-1 Security update for containerd
This update for containerd fixes the following issues: - Update to containerd v1.7.21. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.21 Fixes CVE-2023-47108. bsc1217070 Fixes CVE-2023-45142. bsc1228553 - Update to containerd v1.7.17. Upstream release notes:...
CVE-2023-47758
Cross-Site Request Forgery CSRF vulnerability in Mondula GmbH Multi Step Form plugin = 1.7.11 versions...
CVE-2023-0810
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11...
CVE-2022-4614 Cross-site Scripting (XSS) - Stored in alagrede/znote-app
Cross-site Scripting XSS - Stored in GitHub repository alagrede/znote-app prior to 1.7.11...
Znote 跨站脚本漏洞
Znote is a community-led learning platform. A cross-site scripting vulnerability exists in Znote versions prior to 1.7.11. An attacker exploited the vulnerability to perform cross-site scripting attacks...
CVE-2022-38298
Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery SSRF via redirecting incoming requests to the AWS internal metadata endpoint...
PT-2022-24349 · Appsmith +1 · Appsmith +1
Name of the Vulnerable Software and Affected Versions: Appsmith version 1.7.11 Description: An issue in the Elasticsearch plugin allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint. Recommendations: For Appsmith version 1.7.11, consider disabling the Elasticsear...
Appsmith 安全漏洞
Appsmith is an open source platform for building, deploying and maintaining on-premise applications from Appsmith Open Source. A security vulnerability exists in Appsmith version v1.7.11, which stems from an issue in the Elasticsearch plugin that allows an attacker to connect unallowed hosts to...