Lucene search
+L

20577 matches found

Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•9 views

PT-2025-12894

Name of the Vulnerable Software and Affected Versions wpsiteeditor Site Editor Google Map versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

7.1CVSS8.4AI score0.0037EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•9 views

CVE-2025-28893: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS8.6AI score0.00795EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•18 views

Adobe Acrobat Memory Use Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

7.8CVSS8.2AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•15 views

PT-2025-12955

Name of the Vulnerable Software and Affected Versions NotFound Visual Text Editor versions 1.2.1 and earlier Description The issue is related to improper control of code generation, allowing remote code inclusion. This can lead to remote code injection due to the improper control of code...

9.9CVSS8.6AI score0.00795EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•10 views

CVE-2025-23466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS8.5AI score0.0037EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•23 views

Adobe Illustrator Buffer Overflow

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS7.7AI score0.00225EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/03/25 12:00 a.m.•19 views

CBL Mariner 2.0 Security Update: vim (CVE-2025-29768)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-29768 advisory. - Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions...

4.4CVSS5.9AI score0.00398EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/24 8:15 p.m.•67 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00278EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/03/24 8:15 p.m.•22 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.9AI score0.00278EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/24 7:45 p.m.•71 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00278EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/24 7:45 p.m.•25 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.9AI score0.00278EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/24 7:45 p.m.•94 views

CVE-2025-2231

CVE-2025-2231 affects PDF-XChange Editor. The vulnerability is an out-of-bounds read in the RTF file parsing path that can allow remote code execution in the editor. Root cause: improper validation of user-supplied data leading to reading past the end of an allocated buffer. Exploitation requires...

7.8CVSS7.9AI score0.00278EPSS
SaveExploits0References2Affected Software2
Patchstack
Patchstack
•added 2025/03/24 1:11 p.m.•23 views

WordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by theviper17 in WordPress Plugin Visual Text Editor versions = 1.2.1...

9.9CVSS8.5AI score0.00795EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/24 9:15 a.m.•17 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS0.0039EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/03/24 9:15 a.m.•21 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS3.3AI score0.0039EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2025/03/24 8:59 a.m.•18 views

WordPress Slider, Gallery, Carousel by MetaSlider plugin < 3.95.0 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Responsive Slider by MetaSlider versions 3.95.0...

3.5CVSS5.8AI score0.00267EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/03/24 8:31 a.m.•76 views

CVE-2025-2700

CVE-2025-2700 affects michelson Dante Editor up to 0.4.4, specifically the Insert Link Handler. The issue is a cross-site scripting vulnerability exploitable remotely; exploitation has been disclosed publicly, and the vendor was contacted but did not respond. No concrete remediation or affected v...

5.4CVSS3.3AI score0.0039EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/24 8:31 a.m.•34 views

CVE-2025-2700 michelson Dante Editor Insert Link cross site scripting

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.1CVSS0.0039EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/03/24 8:31 a.m.•11 views

CVE-2025-2700 michelson Dante Editor Insert Link cross site scripting

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.1CVSS3.3AI score0.0039EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/24 8:31 a.m.•10 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS3.3AI score0.0039EPSS
SaveExploits1References4
Rows per page
Query Builder