Lucene search
K

1563 matches found

Openbugbounty
Openbugbounty
added 2025/04/11 1:8 a.m.5 views

urbandictionary.com Cross Site Scripting vulnerability OBB-4043122

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
CNNVD
CNNVD
added 2025/04/07 12:0 a.m.3 views

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which stems from the edit method not properly verifying the privileges of the requesting user, which could result in modifying the specified dictId...

8.8CVSS6.6AI score0.00505EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2025/04/04 3:0 a.m.4 views

SUSE CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.9CVSS7AI score0.00155EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/03 9:44 a.m.9 views

CVE-2025-30840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS7.2AI score0.00293EPSS
Exploits0References1
NVD
NVD
added 2025/04/02 11:15 p.m.12 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS0.00155EPSS
Exploits0References1
OSV
OSV
added 2025/04/02 11:15 p.m.2 views

UBUNTU-CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS5.8AI score0.00155EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/02 10:18 p.m.16 views

CVE-2025-3154 Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS0.00155EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/04/02 10:18 p.m.3 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS7.3AI score0.00155EPSS
Exploits0References1
CVE
CVE
added 2025/04/02 10:18 p.m.50 views

CVE-2025-3154

CVE-2025-3154 affects Xpdf up to version 4.05, due to an out-of-bounds array write triggered by an invalid VerticesPerRow value in a PDF shading dictionary. Fedora advisories show the fix as xpdf-4.06, and Slackware/Nessus entries reference the same vulnerability family; upgrade to 4.06 (or newer...

2.1CVSS7.2AI score0.00155EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/04/02 10:18 p.m.5 views

CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary...

2.1CVSS4.5AI score0.00155EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/04/02 12:0 a.m.3 views

PT-2025-14564

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is an out-of-bounds array write, triggered by an invalid VerticesPerRow value in a PDF shading dictionary. Recommendations For versions 4.05 and earlier, update to a version that fixes this...

8.2CVSS6.7AI score0.00391EPSS
Exploits2References31
CNNVD
CNNVD
added 2025/04/02 12:0 a.m.4 views

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf 4.05 and earlier versions, which stems from an out-of-bounds array write due to an invalid VerticesPerRow value in the PDF...

2.1CVSS4.3AI score0.00155EPSS
Exploits0References2
NVD
NVD
added 2025/04/01 6:15 a.m.15 views

CVE-2025-30840

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS0.00293EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.6 views

CVE-2025-30840 WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS7.3AI score0.00293EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.16 views

CVE-2025-30840 WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through = 2.12.5...

7.1CVSS0.00293EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.52 views

CVE-2025-30840

CVE-2025-30840: Reflected XSS in xili-dictionary (WordPress plugin) due to improper neutralization of input during web page generation. Affected: xili-dictionary versions up to 2.12.5 (vulnerable range not further specified). Root cause: insufficient escaping of user-controlled input in page gene...

7.1CVSS7.2AI score0.00293EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.3 views

WordPress plugin xili-dictionary 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

7.1CVSS7.8AI score0.00293EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.4 views

PT-2025-14055 · Unknown · Xili-Dictionary

Name of the Vulnerable Software and Affected Versions: xili-dictionary versions 2.12.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the xili-dictionary...

7.1CVSS9.3AI score0.00293EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/03/27 12:16 p.m.7 views

WordPress xili-dictionary plugin <= 2.12.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin xili-dictionary versions = 2.12.5...

7.1CVSS6.1AI score0.00293EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-41859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In freeradius, the EAP-PWD function computepasswordelement leaks information about the password which allows an attacker to substantially reduce the size of an...

7.5CVSS7.2AI score0.0086EPSS
Exploits0References2
Rows per page
Query Builder