CVE-2025-24344

The CVE-2025-24344 entry concerns the ctrlX OS web application where a vulnerability lies in the error notification messages. The issue allows a remote, unauthenticated attacker to inject arbitrary HTML tags and, potentially, execute client-side code within another user’s browser through a crafte...

CVE-2025-24344: Improper Neutralization of Script in an Error Message Web Page

A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute arbitrary client-side code in the context of another user's browser via a crafted HTTP request...

CVE-2025-23902

Cross-Site Request Forgery CSRF vulnerability in Taras Dashkevych Error Notification error-notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through = 0.2.7...

CVE-2025-23902 WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Taras Dashkevych Error Notification error-notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through = 0.2.7...

CVE-2025-23902 WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Taras Dashkevych Error Notification error-notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through = 0.2.7...

CVE-2025-23902

CVE-2025-23902 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Error Notification (Taras Dashkevych). Affected versions are listed as up to 0.2.7 (scope: from n/a through 0.2.7). The Red Hat advisory confirms the same CVE and description. There are no connected...

WordPress Error Notification plugin <= 0.2.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Error Notification versions = 0.2.7...

CVE-2025-23902: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Taras Dashkevych Error Notification error-notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through = 0.2.7...

WordPress plugin Error Notification 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

Cyclos 4 PRO Cross-Site Scripting Vulnerability (CNVD-2022-77956)

Cyclos 4 PRO is a web server. a cross-site scripting vulnerability exists in Cyclos 4 PRO version 4.14.7 and earlier, which stems from a failure to validate user input during error notification. A remote, unauthenticated attacker could execute javascript code via undefine enumeration constants...

Cyclos 4 PRO 跨站脚本漏洞

Cyclos 4 PRO is a web server. a cross-site scripting vulnerability exists in Cyclos 4 PRO version 4.14.7 and earlier, which stems from a failure to validate user input during error notification. A remote, unauthenticated attacker could execute javascript code via undefine enumeration constants...

CVE-2020-3701

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130...

Design/Logic Flaw

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130...

CVE-2020-3701

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130...

CVE-2020-3701: Use After Free

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130...

Cross-site Scripting (XSS)

Central Dogma is vulnerable to cross-site scripting XSS. It does not escape the arg.message parameter in error notification messages, allowing an attacker to inject arbitrary script through it...

SUSE-SU-2018:2092-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new feature was added: - NVDIMM memory error notification ACPI 6.2 The following security bugs were fixed: - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result...

Legal Robot: No error or notification on Reset password page

Hello I found that there is no error occurring at Reset password page. There should error occur when user enter the wrong email-id or the entered password is used in 180 previous days or token got expired because from previous reset link also the page got opened so, user would not be able to...

Propagation Fails with error "Failed to get the end status of the server configuration update."

"Failed to get the end status of the server configuration update." "Failure to notify of configuration update." "An erorr occurred running the command : 'Add-DSFeatureInstances'...