37691 matches found
CVE-2025-62963
CVE-2025-62963 describes a DOM-based Cross-Site Scripting flaw in the WordPress plugin Estatik (Estatik Real Estate Plugin) due to improper input neutralization during web page generation. The initial record states impact on Estatik versions up to 4.1.13 (and connected sources indicate a broader ...
CVE-2025-62921
CVE-2025-62921 is a DOM-based XSS vulnerability in the WordPress plugin Bulk Auto Image Title Attribute (bulk-image-title-attribute)
PT-2025-43806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through = 8.7.15...
PT-2025-43798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-Based XSS.This issue affects Bulk Auto Image Title Attribute: from n/a through = 2.0.1...
[SECURITY] [DLA 4350-1] tika security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4350-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini October 26, 2025 https://wiki.debian.org/LTS -...
Fedora 41 : perl-YAML-Syck (2025-568b5b6ddc)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-568b5b6ddc advisory. This update addresses a flaw in which processing a specially-crafted YAML document could lead to accessing information outside of the document itself and hen...
OESA-2025-2520 poppler security update
is a PDF rendering library. Security Fixes: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.CVE-2025-43903...
Cross-site Scripting (XSS)
com.liferay, com.liferay.dynamic.data.mapping.form.field.type is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of user-supplied input in "Rich Text" type fields within web content structures, document types, or custom assets using the Data Engine module,...
EUVD-2025-35783
Not used...
EUVD-2025-35782
Not used...
EUVD-2025-35778
Not used...
EUVD-2025-35780
Not used...
EUVD-2025-35785
Not used...
EUVD-2025-35784
Not used...
EUVD-2025-35781
Not used...
EUVD-2025-35779
Not used...
CBK Soft EnVision 安全漏洞
CBK Soft EnVision is an enterprise document management system from CBK Soft, Turkey. A security vulnerability exists in versions prior to CBK Soft EnVision 250566 that stems from observable differences and exposure of sensitive information that could lead to account footprint identification...
EUVD-2025-35732
Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6...
CVE-2025-49923
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...