Lucene search
K

144 matches found

CNNVD
CNNVD
added 2026/05/22 12:0 a.m.4 views

Vinades NukeViet 跨站脚本漏洞

Vinades NukeViet is an open-source content management system CMS developed by the Vietnamese company Vinades. Versions of Vinades NukeViet 4.5.07 and earlier had a cross-site scripting vulnerability. This vulnerability stemmed from insufficient input cleansing on the server side, which could lead...

8.7CVSS5.7AI score0.00609EPSS
Exploits0References3
OSV
OSV
added 2026/05/06 12:54 p.m.3 views

CLSA-2026-1778072039 openssl: Fix of CVE-2026-31790

CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSApublicencrypt return value and cleansing secret on failure...

7.5CVSS6AI score0.00981EPSS
Exploits0References1
OSV
OSV
added 2026/05/05 2:29 a.m.5 views

CLSA-2026-1777948139 openssl: Fix of CVE-2026-31790

CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSApublicencrypt return value and cleansing secret on failure...

7.5CVSS5.8AI score0.00981EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.5 views

WordPress plugin Age Verification & Identity Verification by Token of Trust 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS6AI score0.00335EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.4 views

WordPress plugin Schema Shortcode 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00156EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.4 views

WordPress plugin Ed s Social Share 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00193EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/07 12:0 a.m.4 views

WordPress plugin DA Media GigList 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00197EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.10 views

WordPress plugin Complianz 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.6AI score0.00245EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/14 12:0 a.m.4 views

WordPress plugin Percent to Infograph 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.0026EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.3 views

Sellacious eCommerce cross-site scripting vulnerability

Sellacious eCommerce is an e-commerce platform software developed by the Sellacious company. Version 4.6 of Sellacious eCommerce contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of input fields such as names, companies, and addresses in the Manage Yo...

6.4CVSS5.6AI score0.00252EPSS
Exploits0References5
Redos
Redos
added 2025/12/03 12:0 a.m.5 views

ROS-20251203-17

Vulnerabilities in GLPI's computer hardware request, incident, and inventory system are related to insufficient cleansing of user-supplied data. Exploitation of the vulnerability could allow A remote attacker to use malicious code to steal recipient credentials mail...

7.5CVSS7AI score0.05894EPSS
Exploits0
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.1 views

WordPress plugin Share to Google Classroom 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00157EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2000-0944

Malware in sbrugna...

7.5CVSS6.4AI score0.01209EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-2402

Malware in sbrugna...

4.3CVSS6.4AI score0.02193EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-0203

Malware in sbrugna...

5CVSS6AI score0.02856EPSS
Exploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-7100

Malware in sbrugna...

7.5CVSS6.1AI score0.55126EPSS
Exploits6References5
Redos
Redos
added 2025/08/22 12:0 a.m.2 views

ROS-20250822-02

A vulnerability in the dom4j open source Java library for XML, XPath and XSLT is related to the improper cleansing of elements and attribute names in XML documents. Exploitation of the vulnerability could Allow an attacker acting remotely to launch an XXE attack on the target system...

7.5CVSS6.5AI score0.06394EPSS
Exploits1
Redos
Redos
added 2025/08/21 12:0 a.m.7 views

ROS-20250821-08

A vulnerability in the TCPDF PHP library is related to reading arbitrary files from the server's file system via the src tag. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information. information Vulnerability in TCPDF PHP library is related to improper...

7.5CVSS8.4AI score0.01325EPSS
Exploits3
CNNVD
CNNVD
added 2025/06/24 12:0 a.m.1 views

WordPress plugin Conference Scheduler 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Conference Scheduler plugin, which stems from insufficient input cleanup and output escaping of the className...

6.4CVSS6AI score0.00235EPSS
Exploits0References5
Redos
Redos
added 2025/06/24 12:0 a.m.4 views

ROS-20250624-07

A vulnerability in the Mercurial version control software tool is related to insufficient data cleansing, provided by the user. Exploitation of the vulnerability could allow an attacker acting remotely to perform cross-site scripting XSS attacks. remotely to perform cross-site scripting XSS attac...

5.3CVSS6.1AI score0.00452EPSS
Exploits0
Rows per page
Query Builder