16330 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-39201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Impact The issue allows an authenticat...
Linux Distros Unpatched Vulnerability : CVE-2019-16781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 5.3.1, authenticated users with lower privileges like contributors can inject JavaScript code in the block editor, which is executed within...
Linux Distros Unpatched Vulnerability : CVE-2021-29450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This...
Linux Distros Unpatched Vulnerability : CVE-2024-1736
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to...
PT-2025-33664 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.2.3 Description: NamelessMC is a website software for Minecraft servers. A cross-site scripting XSS issue exists in the dashboard text editor component, potentially allowing remote authenticated attackers to...
CVE-2025-52712
Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.8...
CVE-2012-10054
Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter,...
CVE-2025-51691
Cross-Site Scripting XSS vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 May 2025 allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before renderin...
Malicious code in ory-editor-renderer-hubside (npm)
The package ory-editor-renderer-hubside was found to contain malicious code...
Malicious code in webtask-sequence-editor (npm)
The package webtask-sequence-editor was found to contain malicious code...
Malicious code in markup-web-editor (npm)
The package markup-web-editor was found to contain malicious code...
com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)
com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...
MAL-2025-32555 Malicious code in rule-editor (npm)
The package rule-editor was found to contain malicious code...
MAL-2025-25958 Malicious code in markup-web-editor (npm)
The package markup-web-editor was found to contain malicious code...
MAL-2025-26629 Malicious code in monaco-editor-loader (npm)
The package monaco-editor-loader was found to contain malicious code...
MAL-2025-19522 Malicious code in elevio-editor (npm)
The package elevio-editor was found to contain malicious code...
Malicious code in elevio-editor (npm)
The package elevio-editor was found to contain malicious code...
MAL-2025-36839 Malicious code in three-editor-release (npm)
The package three-editor-release was found to contain malicious code...