CVE-2017-18576

The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation...

CVE-2019-18915

A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Event Utility system service...

CVE-2019-20847

An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a usertyping WebSocket event to any channel...

CVE-2011-0756

The application server in Trustwave WebDefend Enterprise before 5.0 uses hardcoded console credentials, which makes it easier for remote attackers to read security-event data by using the remote console GUI to connect to the management port...

CVE-2020-12707

An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT elements. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT elements...

CVE-2020-12438

An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT tags...

CVE-2023-49179

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in N.O.U.S. Open Useful and Simple Event post allows Stored XSS.This issue affects Event post: from n/a through 5.8.6...

CVE-2023-49181

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce allows Stored XSS.This issue affects WP Event Manager – Events Calendar, Registrations, Sell Ticket...

CVE-2023-4605

A valid authenticated Lenovo XClarity Administrator LXCA user can potentially leverage an unauthenticated API endpoint to retrieve system event information...

CVE-2021-31839

Improper privilege management vulnerability in McAfee Agent for Windows prior to 5.7.3 allows a local user to modify event information in the MA event folder. This allows a local user to either add false events or remove events from the event logs prior to them being sent to the ePO server...

CVE-2021-22538

A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server versions prior to 0.23.1, allows an attacker who 1 has UserWrite permissions and 2 is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their...

CVE-2024-39630

Deserialization of Untrusted Data vulnerability in MotoPress Timetable and Event Schedule allows Object Injection.This issue affects Timetable and Event Schedule: from n/a through 2.4.13...

CVE-2025-23915

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through = 1.1...

CVE-2025-23699

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in techmix Event Countdown Timer Plugin by TechMix event-countdown-timer allows Reflected XSS.This issue affects Event Countdown Timer Plugin by TechMix: from n/a through = 1.4...

CVE-2026-0772

creationtimestamp| type| source ---|---|--- 2026-01-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-038/ 2026-01-23 05:57:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zejlbhd2a 2026-01-23 05:58:33+00:00| seen|...

CVE-2025-67004

creationtimestamp| type| source ---|---|--- 2026-01-09 03:23:07+00:00| seen| https://gist.github.com/thepiyushkumarshukla/d01f8004c43692f18c75548f4739955a 2026-01-09 16:58:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866201478859132 2026-01-09 18:36:13+00:00| seen|...

GHSA-2MWC-H2MG-V6P8

creationtimestamp| type| source ---|---|--- 2026-01-08 22:13:35+00:00| published-proof-of-concept| Telegram/Njdg7hNd6kVHrE8zyDhSRVDaVv1qeC9aHNV71Bz262lH4E 2026-01-24 22:43:29+00:00| seen| https://gist.github.com/alon710/5a5fd0c0cf4a2b079f4cae91831c6b4c...

EUVD-2026-1489

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0...

CVE-2026-22246

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...

CVE-2026-21895

creationtimestamp| type| source ---|---|--- 2026-01-08 16:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwe4bkhic2g 2026-01-24 21:26:52+00:00| seen| https://gist.github.com/alon710/7ff8ff77e1550d03234add83f2deb924 2026-01-24 22:42:15+00:00| seen|...