13920 matches found
CVE-2025-5938 Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import
The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the importtemplates function. This makes it possible for...
CVE-2025-5938: Cross-Site Request Forgery (CSRF)
The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the importtemplates function. This makes it possible for...
Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2025-15530)
Adobe Experience Manager is a comprehensive content management solution CMS from Adobe for building websites, mobile apps and managing digital assets, while supporting cross-channel content delivery and the creation of personalized digital experiences. A cross-site scripting vulnerability exists ...
Social Media Is Now a DIY Alert System for ICE Raids
The undocumented migrant community in the United States is using social networks and other digital platforms to send alerts about raids and the presence of immigration agents around the US...
CVE-2025-47977
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks
ConnectWise has disclosed that it's planning to rotate the digital code signing certificates used to sign ScreenConnect, ConnectWise Automate, and ConnectWise remote monitoring and management RMM executables due to security concerns. The company said it's doing so "due to concerns raised by a...
Digital Privacy Everywhere
The increasing proliferation of digital and mobile devices equipped with cameras, microphones, GPS, and other privacy invasive components has raised significant concerns for businesses operating in sensitive or policy restricted environments. Current solutions rely on passive enforcement, such as...
WordPress Easy Digital Downloads plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Easy Digital Downloads plugin, which stems from the application's lack of effective filtering and escaping of...
CVE-2025-4275: Undefined Security Weakness
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot...
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder, related to the use of default administrative account information, allows a intruder to gain unauthorized access to the device.
The vulnerability of the microprogramming software of the Elspec G5 digital event recorder is related to the use of default administrative account information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the device...
CVE-2025-47977
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-47977
CVE-2025-47977 is a cross-site scripting (XSS) flaw in Nuance Digital Engagement Platform caused by improper neutralization of input during web page generation. The vulnerability allows an unauthenticated or unauthorized user to craft input that the system renders, enabling spoofing over a networ...
CVE-2025-47977 Nuance Digital Engagement Platform Spoofing Vulnerability
...
Nuance Digital Engagement Platform Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
PT-2025-24883 · Nuance · Nuance Digital Engagement Platform
Name of the Vulnerable Software and Affected Versions: Nuance Digital Engagement Platform affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an authorized attacker to...
Microsoft Nuance Digital Engagement Platform 跨站脚本漏洞
Microsoft Nuance Digital Engagement Platform is a powerful customer engagement platform from Microsoft Corporation USA that combines Nuance's deep expertise in conversational artificial intelligence AI with Microsoft's cloud services and AI innovations. A cross-site scripting vulnerability exists...
CVE-2025-47977: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...
A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM variable
Overview A vulnerability in an Insyde H2O UEFI firmware application allows digital certificate injection through an unprotected NVRAM variable. This issue arises from the unsafe use of an NVRAM variable, which is used as trusted storage for a digital certificate in the trust validation chain. An...
Siemens Energy Services
SUMMARY Siemens Energy Services previously known as Managed Applications and Services, sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker to gain remote control of the...