Lucene search
+L

130 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-11672

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00276EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2025-20100

Malicious code in bioql PyPI...

4CVSS6.4AI score0.00331EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-6753

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00255EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-26904

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-57913

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00426EPSS
SaveExploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-52506

Malicious code in bioql PyPI...

7.1CVSS8.9AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/07 2:32 p.m.8 views

CVE-2025-58873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issue affects Pushe Web Push Notification: from n/a through = 0.5.0...

5.9CVSS5.9AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/05 2:16 p.m.20 views

CVE-2025-58873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issue affects Pushe Web Push Notification: from n/a through = 0.5.0...

5.9CVSS0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/05 1:45 p.m.18 views

CVE-2025-58873 WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issue affects Pushe Web Push Notification: from n/a through = 0.5.0...

5.9CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/05 1:45 p.m.17 views

CVE-2025-58873

CVE-2025-58873 affects the WordPress plugin Pushe Web Push Notification (versions up to 0.5.0). The issue is a Stored XSS caused by improper input neutralization during web page generation, enabling XSS via user-supplied data. Public sources provide the root cause and affected versions but do not...

5.9CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 1:45 p.m.2 views

CVE-2025-58873 WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issue affects Pushe Web Push Notification: from n/a through = 0.5.0...

5.9CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/05 1:43 p.m.8 views

WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan in WordPress Plugin Pushe Web Push Notification versions = 0.5.0...

5.9CVSS6AI score0.00182EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.16 views

PT-2025-36212

Name of the Vulnerable Software and Affected Versions: pusheco Pushe Web Push Notification versions through 0.5.0 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

5.9CVSS4.8AI score0.00182EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.10 views

WordPress plugin Pushe Web Push Notification 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS5.8AI score0.00182EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/07 12:8 a.m.12 views

CVE-2025-53604

The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...

4CVSS6.5AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/05 3:30 a.m.7 views

GHSA-287X-9RFF-QVCG Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...

4CVSS6.2AI score0.00331EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/07/05 3:30 a.m.16 views

Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...

4CVSS6.3AI score0.00331EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2025/07/05 1:15 a.m.11 views

CVE-2025-53604

The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...

4CVSS0.00331EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/05 1:15 a.m.9 views

CVE-2025-53604

The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...

4CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/07/05 12:0 a.m.4 views

CVE-2025-53604

The web-push crate before 0.10.3 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header...

4CVSS7.1AI score0.00331EPSS
SaveExploits0References3
Rows per page
Query Builder