Lucene search
+L

19738 matches found

Cvelist
Cvelist
•added 2025/03/26 2:24 p.m.•39 views

CVE-2025-28893 WordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS0.00779EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/26 2:24 p.m.•71 views

CVE-2025-23466

CVE-2025-23466 concerns the WordPress plugin Site Editor Google Map (Site Editor Google Map) and is a Reflected XSS vulnerability in the web page generation input handling. Affected range: plugin versions from n/a through 1.0.1. The NVD/Red Hat entries describe this as an improper neutralization ...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/26 2:24 p.m.•9 views

CVE-2025-23466 WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/26 9:19 a.m.•14 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS6.3AI score0.00383EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•7 views

CVE-2025-23466: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS5.8AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•5 views

PT-2025-12894

Name of the Vulnerable Software and Affected Versions wpsiteeditor Site Editor Google Map versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

7.1CVSS0.00363EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•5 views

PT-2025-12955

Name of the Vulnerable Software and Affected Versions NotFound Visual Text Editor versions 1.2.1 and earlier Description The issue is related to improper control of code generation, allowing remote code inclusion. This can lead to remote code injection due to the improper control of code...

9.9CVSS0.00779EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/26 12:00 a.m.•4 views

CVE-2025-28893: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Govind Visual Text Editor visual-text-editor allows Remote Code Inclusion.This issue affects Visual Text Editor: from n/a through = 1.2.1...

9.9CVSS5.8AI score0.00779EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/26 12:00 a.m.•15 views

WordPress plugin Visual Text Editor 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.9CVSS9AI score0.00779EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•19 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to memory usage after it is freed, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

7.8CVSS7.7AI score0.00353EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•17 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to memory usage after it is freed, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

7.8CVSS7.7AI score0.00353EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/03/26 12:00 a.m.•21 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.4AI score0.00225EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/03/25 12:00 a.m.•15 views

CBL Mariner 2.0 Security Update: vim (CVE-2025-29768)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-29768 advisory. - Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions...

4.4CVSS4.9AI score0.00394EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/24 8:15 p.m.•61 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/24 8:15 p.m.•20 views

CVE-2025-2231

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS6.2AI score0.00278EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/24 7:45 p.m.•24 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS7.8AI score0.00278EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/24 7:45 p.m.•68 views

CVE-2025-2231 PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visi...

7.8CVSS0.00278EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/24 7:45 p.m.•91 views

CVE-2025-2231

CVE-2025-2231 affects PDF-XChange Editor. The vulnerability is an out-of-bounds read in the RTF file parsing path that can allow remote code execution in the editor. Root cause: improper validation of user-supplied data leading to reading past the end of an allocated buffer. Exploitation requires...

7.8CVSS7.8AI score0.00278EPSS
SaveExploits0References2Affected Software2
Patchstack
Patchstack
•added 2025/03/24 1:11 p.m.•18 views

WordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by theviper17 in WordPress Plugin Visual Text Editor versions = 1.2.1...

9.9CVSS7.5AI score0.00779EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2025/03/24 9:15 a.m.•16 views

CVE-2025-2700

A vulnerability classified as problematic has been found in michelson Dante Editor up to 0.4.4. This affects an unknown part of the component Insert Link Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

5.4CVSS3.7AI score0.00383EPSS
SaveExploits1References4
Rows per page
Query Builder