10294 matches found
CVE-2025-23658
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...
CVE-2025-23658 WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form advanced-angular-contact-form allows Reflected XSS.This issue affects Advanced Angular Contact Form: from n/a through = 1.1.0...
CVE-2025-23658 WordPress Advanced Angular Contact Form plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tauhidul Alam Advanced Angular Contact Form allows Reflected XSS. This issue affects Advanced Angular Contact Form: from n/a through 1.1.0...
CVE-2025-23658
CVE-2025-23658: Reflected XSS in WordPress plugin Advanced Angular Contact Form (
SUSE CVE-2023-20588
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...
WordPress plugin Advanced Angular Contact Form 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
CVE-2025-26582
Cross-Site Request Forgery CSRF vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-advanced-qtranslate-fix-editor-problems allows Stored XSS.This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through = 1.0.0...
CVE-2025-26582
CVE-2025-26582 affects the WordPress plugin TinyMCE Advanced qTranslate fix editor problems (
CVE-2025-26582 WordPress TinyMCE Advanced qTranslate fix editor problems plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-advanced-qtranslate-fix-editor-problems allows Stored XSS.This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through = 1.0.0...
CVE-2025-26582 WordPress TinyMCE Advanced qTranslate fix editor problems plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems tinymce-advanced-qtranslate-fix-editor-problems allows Stored XSS.This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through = 1.0.0...
WordPress TinyMCE Advanced qTranslate fix editor problems plugin <= 1.0.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin TinyMCE Advanced qTranslate fix editor problems versions = 1.0.0...
Apple ordered to grant access to users’ encrypted data
Last week, an article in the Washington Post revealed the UK had secretly ordered Apple to provide blanket access to protected cloud backups around the world. Since then, privacy focused groups have uttered their objections. The UK government has demanded to be able to access encrypted data store...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS is to support a new UMA carveout model. This resolves a null dereference issue when accessing Ctx-dcbios-integratedinfo, as this variable...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: Adjusted error handling in case of absence of a codec device. The acpigetfirstphysicalnode function may return NULL in several situations e.g., no such device exists, ACPI table error, reference count drops to 0, etc...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Makes rmwlock a rawspinlock. The following bug was triggered: ============================= Bug: Invalid wait context 6.12.0-rc2-XXX 406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock:...
CVE-2025-24868
CVE-2025-24868 relates to SAP HANA XS Advanced (UAA) where an unauthenticated attacker can craft a link that redirects victims’ browsers to a malicious site due to insufficient redirect URL validation. Documented impact is limited to confidentiality, integrity, and availability. Affected componen...
PT-2025-6384 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service
Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Integrated Management Technology AIM-...
AMD Server Processor 输入验证错误漏洞
AMD Server Processor is a processor product from UltraMicro Semiconductor AMD for the server market, which is primarily used in data centers, cloud computing, and high performance computing. AMD Server Processor suffers from an input validation error vulnerability that stems from incorrect input...
PT-2025-6128 · Sap · Sap Hana Xs Advanced Model
Name of the Vulnerable Software and Affected Versions: SAP HANA extended application services, advanced model SAP HANA XS advanced model affected versions not specified Description: The User Account and Authentication service UAA for SAP HANA extended application services, advanced model allows a...
PT-2025-6385 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service
Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: A DLL hijacking issue in the Manageability Service could allow an attacker to achieve privilege escalation, potentially resulting in...