Lucene search
+L

11863 matches found

Patchstack
Patchstack
added 2025/03/11 9:46 p.m.9 views

WordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Easy Image Display versions = 1.2.5...

6.5CVSS7.6AI score0.00262EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/11 9:15 p.m.15 views

CVE-2025-28927

Cross-Site Request Forgery CSRF vulnerability in A. Chappard Display Template Name display-template-name allows Cross Site Request Forgery.This issue affects Display Template Name: from n/a through = 1.7.1...

4.3CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/11 9:15 p.m.10 views

CVE-2025-28919

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shellbot Easy Image Display easy-image-display allows Stored XSS.This issue affects Easy Image Display: from n/a through = 1.2.5...

6.5CVSS0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 9:01 p.m.66 views

CVE-2025-28927

CVE-2025-28927 : WordPress Display Template Name plugin

4.3CVSS7.2AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:01 p.m.6 views

CVE-2025-28927 WordPress Display Template Name plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in A. Chappard Display Template Name display-template-name allows Cross Site Request Forgery.This issue affects Display Template Name: from n/a through = 1.7.1...

4.3CVSS8.6AI score0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 9:01 p.m.24 views

CVE-2025-28927 WordPress Display Template Name plugin <= 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in A. Chappard Display Template Name display-template-name allows Cross Site Request Forgery.This issue affects Display Template Name: from n/a through = 1.7.1...

4.3CVSS0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 9:01 p.m.50 views

CVE-2025-28919

CVE-2025-28919 affects the WordPress plugin Easy Image Display (versions ≤ 1.2.5). The issue is a Stored XSS caused by improper input neutralization during web page generation. Affected scope listed in sources shows vulnerability exists in Easy Image Display: from n/a through 1.2.5. CVSS v3.1 bas...

6.5CVSS7.2AI score0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:01 p.m.4 views

CVE-2025-28919 WordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shellbot Easy Image Display easy-image-display allows Stored XSS.This issue affects Easy Image Display: from n/a through = 1.2.5...

6.5CVSS8.6AI score0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 9:01 p.m.27 views

CVE-2025-28919 WordPress Easy Image Display plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shellbot Easy Image Display easy-image-display allows Stored XSS.This issue affects Easy Image Display: from n/a through = 1.2.5...

6.5CVSS0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.7 views

WordPress plugin Display Template Name 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS8.7AI score0.00165EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.12 views

WordPress plugin Easy Image Display 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS8.2AI score0.00262EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/03/10 12:50 p.m.16 views

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS7.2AI score0.00435EPSS
SaveExploits0References9
OSV
OSV
added 2025/03/10 12:00 a.m.14 views

ALSA-2025:2500 Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

7.8CVSS7.5AI score0.00435EPSS
SaveExploits0References18
AlmaLinux
AlmaLinux
added 2025/03/10 12:00 a.m.20 views

Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

7.8CVSS7.5AI score0.00435EPSS
SaveExploits0References18
Microsoft CVE
Microsoft CVE
added 2025/03/08 8:00 a.m.9 views

drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()

...

5.5CVSS7.4AI score0.00249EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/03/07 2:38 a.m.9 views

SUSE CVE-2024-58073

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpuplaneatomicprintstate for valid sspp Similar to the rpipe sspp protect, add a check to protect the pipe state prints to avoid NULL ptr dereference for cases when the state is dumped without a corresponding...

5.5CVSS6.5AI score0.0015EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/03/07 2:38 a.m.10 views

SUSE CVE-2024-58074

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab inteldisplay from the encoder to avoid potential oopsies Grab the inteldisplay from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intelsanitizeencoder, which passes NULL as...

5.5CVSS7.7AI score0.0015EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/07 12:00 a.m.7 views

Duet Display Installed (Windows)

Binary data duetdisplaywininstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/07 12:00 a.m.6 views

Duet Display Installed (macOS)

Binary data macosduetdisplayinstalled.nbin...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:00 a.m.31 views

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows a hacker to replace the address bar.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to substitute the address bar with a specially created link...

6.5CVSS5.9AI score0.00442EPSS
SaveExploits0References6Affected Software5
Rows per page
Query Builder