CVE-2025-62974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

CVE-2025-62974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

CVE-2025-62974 WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

CVE-2025-62974 WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

EUVD-2025-35971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

CVE-2025-62974

CVE-2025-62974 affects the WordPress Headline Analyzer plugin (headline-analyzer) up to version 1.3.7. The issue is a Stored XSS due to improper neutralization of input during web page generation. Documents consistently describe the vulnerability as enabling stored cross-site scripting in Headlin...

PT-2025-43846

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

WordPress plugin Headline Analyzer 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPre...

CVE-2025-62974: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

The vulnerability of the Detail View component of the Hitachi Ops Center Analyzer software, which allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the Detail View component of the Hitachi Ops Center Analyzer software for data analysis and processing is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity of the protect...

The vulnerability of the RAID Agent component of the Hitachi Ops Center Analyzer software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the RAID Agent component of the Hitachi Ops Center Analyzer software for data analysis and processing is related to the lack of verification for the authenticity of data sources. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

WordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Headline Analyzer versions = 1.3.7...

PT-2025-52920

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ntfs3 module related to uninitialized buffers allocated by the getname function. This issue can lead to uninitialized errors after buffer...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to the presence of non-relevant code, which allows attackers to carry out XSS attacks.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic is related to the presence of non-relevant code. Exploiting this vulnerability could allow attackers to carry out XSS attacks...

The vulnerability of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, arises from uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability could allow attackers to cause service interruptions...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the ability to access the channel from a non-endpoint location, allowing attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks lies in the ability to access the channel from a point that is not a final destination. Exploiting this vulnerability could allow an attacker to execute a “man-in-the-middl...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from insufficient protection of operational data. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

CVE-2025-54973

A concurrent execution using shared resource with improper synchronization 'Race Condition' vulnerability CWE-362 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the...

CVE-2025-54973

A concurrent execution using shared resource with improper synchronization 'Race Condition' vulnerability CWE-362 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the...

FreeBSD : zeek -- information leak vulnerability (50fd6a75-0587-4987-bef2-bb933cd78ea1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 50fd6a75-0587-4987-bef2-bb933cd78ea1 advisory. Tim Wojtulewicz of Corelight reports: The KRB analyzer can leak information about hosts in analyzed...