2638 matches found
EUVD-2025-38161
IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 27, 2025 to November 2, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...
EUVD-2025-37804
Not used...
EUVD-2025-37799
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
EUVD-2025-37578
The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to modify plugin's settings via a forged reques...
EUVD-2025-37648
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Visiting a malicious website may lead to user interface spoofing...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from Microsoft USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from Microsoft USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...
EUVD-2025-36724
uv allows ZIP payload obfuscation through parsing differentials...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not verifying that the $BITMAP attribute is null, which could lead to improper index allocation...
CVE-2025-53069
CVE-2025-53069 affects Oracle MySQL Server (Server: Components Services) with affected versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The vulnerability allows a high-privileged, network-accessing attacker to cause a hang or repeatable crashes (DoS); root cause described as Allocation of Res...
Adobe Bridge heap buffer overflow vulnerability (CNVD-2025-24425)
Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 6, 2025 to October 12, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...
aether
Aether - Adaptive Exploit & Threat Hunting Engine for EVM-base...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds read in the parseintegerlimit function, which could lead to memory corruption...
Drupal Owl Carousel 2 安全漏洞
Drupal Owl Carousel 2 is a plugin for the Drupal community. A security vulnerability exists in Drupal Owl Carousel 2. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...
EUVD-2025-32690
Malicious code in solarpeng126 npm...