499 matches found
EUVD-2025-36027
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...
CVE-2025-62912
CVE-2025-62912 corresponds to a Stored XSS in the WordPress plugin SiteGround Email Marketing (versions up to 1.7.1). The issue arises from improper input neutralization during web page generation, enabling stored cross-site scripting. Public sources (NVD, Red Hat, ENISA EUVD, CVE List) confirm t...
PT-2025-43790
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through = 1.7.1...
EUVD-2020-30802
The Async JavaScript plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.19.07.14. This is due to missing authorization checks on the ajsteps AJAX aciton along with a lack on sanitization on the settings saved via the function. This makes it...
EUVD-2020-11756
Malware in sbrugna...
EUVD-2020-18855
Malware in sbrugna...
EUVD-2021-11280
Malware in sbrugna...
EUVD-2021-11494
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: jq (UTSA-2025-986124)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986124 advisory. jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness...
EUVD-2022-38835
Malicious code in bioql PyPI...
EUVD-2025-27963
Malicious code in bioql PyPI...
EUVD-2022-6135
Malicious code in bioql PyPI...
EUVD-2024-16229
Malicious code in bioql PyPI...
EUVD-2023-56805
Malicious code in bioql PyPI...
EUVD-2025-25909
Malicious code in bioql PyPI...
EUVD-2025-26992
Malicious code in bioql PyPI...
EUVD-2022-46411
Malicious code in bioql PyPI...
EUVD-2023-40457
Malicious code in bioql PyPI...
WordPress Custom Searchable Data Entry System plugin <= 1.7.1 - Unauthenticated Database Wiping vulnerability
Unauthenticated Database Wiping vulnerability discovered by Sean Murphy in WordPress Plugin Custom Searchable Data Entry System versions = 1.7.1...
CVE-2020-36852
The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...