37730 matches found
Buffer Over-read
Overview Affected versions of this package are vulnerable to Buffer Over-read in the pdfload process, if compiled with support for PDF input via Poppler. An attacker can cause the application to read beyond the bounds of allocated memory by submitting a specially crafted PDF document with media...
K000156687: Multiple ImageMagick vulnerabilities
Security Advisory Description CVE-2014-9818 ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a malformed sun file. CVE-2014-9819 Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a differe...
libvips 安全漏洞
libvips is a fast image processing library with low memory requirements from the libvips open source. A security vulnerability exists in libvips version 8.17.1 and earlier, which stems from a buffer read overflow when parsing specially crafted PDF file headers...
Linux Distros Unpatched Vulnerability : CVE-2025-57352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS...
PT-2025-39822
Name of the Vulnerable Software and Affected Versions deneme version 1.33 Description deneme version 1.33 is susceptible to HTTP Request Splitting. The provided descriptions lack detailed information about the issue beyond this core finding. The descriptions contain placeholder text and a perfect...
CVE-2025-60099
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Embed Any Document embed-any-document allows Stored XSS.This issue affects Embed Any Document: from n/a through = 2.7.7...
CVE-2025-60142
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...
CVE-2025-11013
A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xmlparsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local...
CVE-2025-11013 BehaviorTree XML Parser xml_parsing.cpp loadDocImpl null pointer dereference
A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xmlparsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local...
WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by 63n0 in WordPress Plugin Embed Any Document versions = 2.7.7...
CVE-2025-60099
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Embed Any Document embed-any-document allows Stored XSS.This issue affects Embed Any Document: from n/a through = 2.7.7...
CVE-2025-60142
CVE-2025-60142 – WordPress: Simple Meta Tags plugin (versions up to 1.5) exposes a DOM-based XSS due to improper neutralization of input during web page generation. The vulnerability is classified as an authenticated issue (Contributor+ required) with stored XSS. The linked docs indicate the vuln...
CVE-2025-60099 WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Embed Any Document embed-any-document allows Stored XSS.This issue affects Embed Any Document: from n/a through = 2.7.7...
CVE-2025-60099
CVE-2025-60099 affects the WordPress plugin Embed Any Document (Embed Any Document) and corresponds to a stored XSS vulnerability. The issue is described as Improper Neutralization of Input During Web Page Generation (XSS) in the plugin, with affected range “from n/a through 2.7.7.” The connected...
CVE-2025-60099 WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Embed Any Document embed-any-document allows Stored XSS.This issue affects Embed Any Document: from n/a through = 2.7.7...
PT-2025-39605
Name of the Vulnerable Software and Affected Versions Robin W bbp topic count versions through 3.1 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for potential malicious code...
WordPress plugin Embed Any Document 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-39546
Name of the Vulnerable Software and Affected Versions Embed Any Document versions through 2.7.7 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS condition. This allows for Stored XSS attacks. The...
CVE-2025-59524
Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...
CVE-2025-42907
SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...