2830 matches found
CVE-2025-32413
Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...
CVE-2025-32413: Improper Neutralization of Input During Web Page Generation
Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...
CVE-2025-32413
Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...
SUSE CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
CVE-2025-3086 User in anonymous role could create and delete views
Improper isolation of users in M-Files Server version before 25.3.14549 allows anonymous user to affect other anonymous users views and possibly cause a denial of service...
BIT-JOOMLA-2021-23125 [20210103] - Core - XSS in com_tags image parameters
An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple comtags views cause lead to XSS attack vectors...
CVE-2025-27556
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.setlanguage are subject to a potential denial-of-service attack v...
PT-2025-13447
Name of the Vulnerable Software and Affected Versions tagDiv Composer plugin for WordPress versions prior to 5.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation within the td ajax get views AJAX action. This allows unauthenticated...
CVE-2025-29401
An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2025-29401: Improper Control of Generation of Code
An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file...
Convert Audio to Video: How to Transform Your Podcasts into Must-Watch Videos
Not getting enough views or traffic to your podcasts? Try this stunning AI audio-to-video generator to transform your…...
Introducing Wiz Lens: Role-based views for every security team
Empowerment and speed for security teams without losing unified cloud context...
CVE-2024-49589
Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...
CVE-2024-49589
Foundry Artifacts is affected by a Denial of Service via disk exhaustion caused by a user-supplied size argument. The PT-2025-6701 entry notes the affected versions are not specified and provides no fix information; no exploit details are described in the provided documents. Monitor for updates.
CVE-2024-49589 Foundry artifacts denial of service
Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...
CVE-2025-24532
CVE-2025-24532 concerns multiple Siemens SCALANCE IEC devices (WAB762-1, WAM763-1, WAM766-1, WUB762-1, WUM763-1, etc.) with versions
CVE-2025-24532
A vulnerability has been identified in SCALANCE WAB762-1 6GK5762-1AJ00-6AA0 All versions V3.0.0, SCALANCE WAM763-1 6GK5763-1AL00-7DA0 All versions V3.0.0, SCALANCE WAM763-1 ME 6GK5763-1AL00-7DC0 All versions V3.0.0, SCALANCE WAM763-1 US 6GK5763-1AL00-7DB0 All versions V3.0.0, SCALANCE WAM766-1...
The vulnerability of the Views module in Drupal’s SVG animation CMS system allows attackers to perform cross-site scripting attacks.
The vulnerability of the Views module in the Drupal SVG Animation CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2019-19826
The Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize calls in handlers/viewshandlerfilterdynamicfields.inc, as demonstrated by PHP object injection, involving a fieldnames object and an ArchiveTar object, for file deletion. Code execution might also be...
CVE-2024-22289
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberNetikz Post views Stats post-views-stats allows DOM-Based XSS.This issue affects Post views Stats: from n/a through = 1.4.1...