Lucene search
+L

7 matches found

Cvelist
Cvelist
added 2026/08/15 9:44 p.m.31 views

CVE-2026-73044 SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on eve...

9.4CVSS0.00247EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-27462

Malicious code in bioql PyPI...

10CVSS6.5AI score0.01048EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/09/09 6:31 p.m.7 views

CVE-2025-55727 XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any user who can edit any page or who can...

10CVSS7.8AI score0.01048EPSS
SaveExploits1References3
CVE
CVE
added 2025/09/09 6:31 p.m.36 views

CVE-2025-55727

CVE-2025-55727 affects XWiki Remote Macros (column macro width parameter). The issue: missing escaping of the width parameter in versions 1.0 through 1.26.4 enables remote code execution when a user can edit a page or access the CKEditor converter, due to unescaped XWiki syntax in the width param...

10CVSS7.8AI score0.01048EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/09/09 6:31 p.m.13 views

CVE-2025-55727 XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any user who can edit any page or who can...

10CVSS8.2AI score0.01048EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.13 views

PT-2025-36917

Name of the Vulnerable Software and Affected Versions: XWiki Remote Macros versions 1.0 through 1.26.5 Description: XWiki Remote Macros provides XWiki rendering macros used for content migration from Confluence. A missing escaping mechanism in the width parameter within the column macro allows fo...

10CVSS7.6AI score0.01048EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2021/04/19 8:15 p.m.6 views

CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

5.5CVSS6.6AI score0.00911EPSS
SaveExploits1References3
Rows per page
Query Builder