Lucene search
K

8322 matches found

RedhatCVE
RedhatCVE
added 2025/04/25 6:40 p.m.11 views

CVE-2025-3809

The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

7.2CVSS7.4AI score0.00433EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:7 p.m.24 views

CVE-2025-32613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager debug-log-manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through = 2.3.4...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
NVD
NVD
added 2025/04/25 3:15 p.m.8 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

7.5CVSS0.00002EPSS
Exploits0References1
CVE
CVE
added 2025/04/25 2:32 p.m.53 views

CVE-2025-43016

CVE-2025-43016 affects JetBrains Rider prior to 2025.1.2. Multiple sources describe a vulnerability in Rider’s custom archive unpacker that enables arbitrary file overwrites during a remote debugging session. Impact is described as arbitrary file overwrite with no explicit exploitation details be...

7.5CVSS7.2AI score0.00002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/25 2:32 p.m.11 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS0.00002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/25 2:32 p.m.5 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS7.4AI score0.00002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/25 12:0 a.m.4 views

PT-2025-17922 · Jetbrains · Jetbrains Rider

Name of the Vulnerable Software and Affected Versions: JetBrains Rider versions prior to 2025.1.2 Description: The issue allows arbitrary file overwrite during a remote debug session due to a custom archive unpacker. Recommendations: For versions prior to 2025.1.2, update to version 2025.1.2 or...

5.5CVSS6.6AI score0.00002EPSS
Exploits0References6
Citrix
Citrix
added 2025/04/24 12:0 a.m.6 views

ADM - CPU utilization is increasing and Debug is enabled

High Load on the CPU at Random time, collect the bundle and shared...

7.2AI score
Exploits0
NVD
NVD
added 2025/04/23 11:15 a.m.10 views

CVE-2025-42604

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...

6.9CVSS0.0061EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.1 views

Meon KYC 安全漏洞

Meon KYC is a solution from Meon India. A security vulnerability exists in Meon KYC that stems from debug mode being enabled on certain API endpoints, which could lead to the disclosure of system related information...

6.9CVSS6.4AI score0.0061EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.2 views

PT-2025-17615 · Unknown · Meon Kyc Solutions

Name of the Vulnerable Software and Affected Versions: Meon KYC solutions affected versions not specified Description: The issue exists due to debug mode being enabled in certain API endpoints, allowing a remote attacker to exploit this by accessing unauthorized API endpoints. This leads to...

6.9CVSS6.1AI score0.0061EPSS
Exploits0References9
Cvelist
Cvelist
added 2025/04/19 5:30 a.m.14 views

CVE-2025-3809 Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting

The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

7.2CVSS0.00433EPSS
Exploits0References2
CVE
CVE
added 2025/04/19 5:30 a.m.74 views

CVE-2025-3809

The CVE-2025-3809 entry concerns the WordPress Debug Log Manager plugin, which has an unauthenticated Stored XSS vulnerability in the auto-refresh debug log feature. Affected versions include all up to and including 2.3.4, with exploitation enabling injection of scripts that run when users open t...

7.2CVSS7.4AI score0.00433EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/19 5:30 a.m.5 views

CVE-2025-3809 Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting

The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

7.2CVSS7.5AI score0.00433EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/19 12:0 a.m.0 views

WordPress plugin Debug Log Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.2CVSS7.5AI score0.00433EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/19 12:0 a.m.3 views

PT-2025-17358 · WordPress · Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Debug Log Manager plugin for WordPress versions up to, and including, 2.3.4 Description: The issue is related to Stored Cross-Site Scripting via the auto-refresh debug log due to insufficient input sanitization and output escaping. This allow...

7.2CVSS8.3AI score0.00433EPSS
Exploits0References12
Veracode
Veracode
added 2025/04/18 5:41 a.m.7 views

Insertion Of Sensitive Information Into Log Files

org.apache.activemq:artemis-project is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to improper handling of sensitive data in debug logging and the ConfigurationImpl logger exposing all broker property values, including credentials or tokens. It allows ...

6.8CVSS6.2AI score0.00164EPSS
Exploits0References4Affected Software4
NVD
NVD
added 2025/04/17 4:15 p.m.4 views

CVE-2025-32613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager debug-log-manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through = 2.3.4...

7.1CVSS0.00219EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.13 views

CVE-2025-32613 WordPress Debug Log Manager plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager debug-log-manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through = 2.3.4...

7.1CVSS0.00219EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:47 p.m.48 views

CVE-2025-32613

The CVE-2025-32613 issue affects Bowo Debug Log Manager up to version 2.3.4, with Stored XSS caused by improper neutralization of input during web page generation. The PT-2025-17139 entry confirms the vulnerability and recommends updating to a fixed version, though no specific patched version is ...

7.1CVSS5.9AI score0.00219EPSS
Exploits0References1
Rows per page
Query Builder