Lucene search
+L

2288 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:59 p.m.13 views

CVE-2021-36539

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...

6.5CVSS6.9AI score0.00874EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:50 p.m.14 views

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

8.8CVSS7.8AI score0.02323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.12 views

CVE-2020-5775

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...

5.8CVSS7AI score0.06531EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:57 a.m.7 views

CVE-2017-8298

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...

5.4CVSS5.2AI score0.00618EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 3:48 p.m.7 views

CVE-2025-31816

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

5.4CVSS7.2AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.6 views

CVE-2025-31816

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

5.4CVSS0.0042EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.48 views

CVE-2025-31816

Technical details for CVE-2025-31816 are not provided in the supplied documents. Monitor for updates from vendor advisories and trusted feeds.

5.4CVSS7.2AI score0.0042EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.4 views

CVE-2025-31816 WordPress Mobile App Canvas Plugin <= 3.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in pietro Mobile App Canvas allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mobile App Canvas: from n/a through 3.8.1...

5.4CVSS7.1AI score0.0042EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.5 views

PT-2025-14198 · Unknown · Pietro Mobile App Canvas

Name of the Vulnerable Software and Affected Versions: pietro Mobile App Canvas versions n/a through 3.8.1 Description: The issue is related to a Missing Authorization vulnerability in the pietro Mobile App Canvas, which allows exploitation of incorrectly configured access control security levels...

5.4CVSS6.2AI score0.0042EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.5 views

WordPress plugin Mobile App Canvas 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.3AI score0.0042EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/29 11:56 a.m.12 views

CVE-2025-30860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/03/29 3:02 a.m.10 views

SUSE CVE-2025-31180

A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...

6.2CVSS6.5AI score0.00195EPSS
SaveExploits0References6
OSV
OSV
added 2025/03/27 3:16 p.m.3 views

DEBIAN-CVE-2025-31180

A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...

6.2CVSS6.1AI score0.00195EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/27 3:16 p.m.19 views

UBUNTU-CVE-2025-31180

A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...

6.2CVSS5.7AI score0.00195EPSS
SaveExploits0References5
NVD
NVD
added 2025/03/27 11:15 a.m.8 views

CVE-2025-30860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

6.5CVSS0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/27 11:08 a.m.8 views

WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Off-Canvas Sidebars & Menus Slidebars versions = 0.5.8.2...

6.5CVSS6.2AI score0.00354EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.4 views

CVE-2025-30860 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

6.5CVSS7.3AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.57 views

CVE-2025-30860

CVE-2025-30860 is a DOM-based Cross-Site Scripting vulnerability in Off-Canvas Sidebars & Menus (Slidebars) for WordPress, stemming from improper neutralization of input during web page generation. Affected versions range up to 0.5.8.2 (date shown). Exploitation would require user interaction and...

6.5CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/03/27 12:00 a.m.7 views

PT-2025-13261

Name of the Vulnerable Software and Affected Versions gnuplot affected versions not specified Description A flaw was found in the CANVAS text function, which may lead to a segmentation fault and cause a system crash. Recommendations At the moment, there is no information about a newer version tha...

6.2CVSS6.4AI score0.00196EPSS
SaveExploits0References54
CNNVD
CNNVD
added 2025/03/27 12:00 a.m.7 views

WordPress plugin Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS7.9AI score0.00354EPSS
SaveExploits0References2
Rows per page
Query Builder