3729 matches found
CVE-2025-46490
CVE-2025-46490 affects Crossword Compiler Puzzles (WordPress plugin)
CVE-2025-46493
CVE-2025-46493 affects WordPress plugin Crossword Compiler Puzzles (versions up to and including 5.3). The issue is a Stored XSS caused by improper neutralization of input during web page generation, leading to cross-site scripting when handling user-supplied content in Crossword Compiler Puzzles...
CVE-2025-46490 WordPress Crossword Compiler Puzzles plugin <= 5.2 - Arbitrary File Upload Vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Upload a Web Shell to a Web Server.This issue affects Crossword Compiler Puzzles: from n/a through = 5.2...
CVE-2024-21857
Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-28458
Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c...
CVE-2024-5600
The SCSS Happy Compiler – Compile SCSS to CSS & Automatic Enqueue plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check and insufficient sanitization on the importsettings function in all versions up to, and including, 1.3.10. This makes it possible f...
CVE-2024-45056
zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold xor shl 1, x, -1 to rotl 1, x if run with optimizations enabled. Here 1 is generated as an unsigned 64 bits number 2^64-1. This number is zero-extended to 256 bits on EraVM target while it should have been sign-extended...
CVE-2024-42476
In the OAuth library for nim prior to version 0.11, the Authorization Code grant and Implicit grant both rely on the state parameter to prevent cross-site request forgery CSRF attacks where a resource owner might have their session associated with protected resources belonging to an attacker. Whe...
CVE-2024-31407
Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-24567
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Vyper compiler allows passing a value in builtin rawcall even if the call is a delegatecall or a staticcall. But in the context of delegatecall and staticcall the handling of value is not possible due to the semantics o...
CVE-2024-34165
Uncontrolled search path in some IntelR oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-28881
Uncontrolled search path for some IntelR Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-50434
emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...
CVE-2023-29162
Improper buffer restrictions the IntelR C++ Compiler Classic before version 2021.8 for IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...
WordPress plugin Crossword Compiler Puzzles 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue vulnerability...
PT-2025-22735 · Unknown · Crossword Compiler
Name of the Vulnerable Software and Affected Versions: Crossword Compiler Puzzles versions 5.2 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and...
PT-2025-22736 · Unknown · Crossword Compiler
Name of the Vulnerable Software and Affected Versions: Crossword Compiler Puzzles versions 5.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For...
WordPress plugin Crossword Compiler Puzzles 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-41342
Improper buffer restrictions in the IntelR C++ Compiler Classic before version 2021.7.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access...