Lucene search
+L

9405 matches found

NVD
NVD
added 2025/04/09 5:15 p.m.15 views

CVE-2025-32488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in آریا وردپرس Aria Font aria-font allows Stored XSS.This issue affects Aria Font: from n/a through = 1.4...

5.9CVSS0.00384EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 4:09 p.m.23 views

CVE-2025-32488 WordPress Aria Font plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in آریا وردپرس Aria Font aria-font allows Stored XSS.This issue affects Aria Font: from n/a through = 1.4...

5.9CVSS0.00384EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/09 4:09 p.m.60 views

CVE-2025-32488

CVE-2025-32488 affects the WordPress Aria Font plugin. Wordfence’s vulnerability detail shows an authenticated (Administrator+) stored XSS in Aria Font (versions up to 1.4) caused by improper input handling during page generation. The Initial Description describes a Stored XSS, and connected Word...

5.9CVSS7.2AI score0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:09 p.m.10 views

CVE-2025-32488 WordPress Aria Font <= 1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in آریا وردپرس Aria Font allows Stored XSS. This issue affects Aria Font: from n/a through 1.4...

5.9CVSS5.7AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.7 views

WordPress plugin Aria Font 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.00384EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/04/07 7:12 a.m.4 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2024-44192: Fixed unexpected process crash due to processing maliciously crafted web content bsc1239863 CVE-2024-54467: Fixed information disclosure via data cross-origin exfiltration due to a cookie management issue bsc1239864 Other...

7.1CVSS8AI score0.04117EPSS
SaveExploits4References12
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.40 views

RHEL 9 : freetype (RHSA-2025:3407)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3407 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.26 views

RHEL 9 : freetype (RHSA-2025:3384)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3384 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.29 views

RHEL 8 : freetype (RHSA-2025:3393)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3393 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.73 views

RHEL 7 : freetype (RHSA-2025:3395)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3395 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.47 views

RHEL 9 : freetype (RHSA-2025:3383)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3383 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2025/04/05 12:00 a.m.26 views

RHEL 8 : freetype (RHSA-2025:3386)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3386 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...

8.1CVSS7.3AI score0.27775EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/04/03 3:50 p.m.14 views

CVE-2025-31861

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPOrbit Support Perfect Font Awesome Integration perfect-font-awesome-integration allows Stored XSS.This issue affects Perfect Font Awesome Integration: from n/a through = 2.3...

6.5CVSS7.2AI score0.00269EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/03 11:08 a.m.9 views

OESA-2025-1361 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...

9.8CVSS7.5AI score0.0081EPSS
SaveExploits0References5
OSV
OSV
added 2025/04/03 11:08 a.m.7 views

OESA-2025-1358 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...

9.8CVSS7.5AI score0.0081EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/03 11:08 a.m.8 views

OESA-2025-1362 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...

9.8CVSS7.5AI score0.0081EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/03 11:08 a.m.13 views

OESA-2025-1359 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...

9.8CVSS7.5AI score0.0081EPSS
SaveExploits0References7
OSV
OSV
added 2025/04/03 11:08 a.m.10 views

OESA-2025-1360 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of...

9.8CVSS7.5AI score0.0081EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/04/03 9:56 a.m.9 views

CVE-2025-30614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Haozhe Xie Google Font Fix google-font-fix allows Reflected XSS.This issue affects Google Font Fix: from n/a through = 2.3.1...

7.1CVSS7.2AI score0.00306EPSS
SaveExploits0References1
Citrix
Citrix
added 2025/04/02 12:00 a.m.18 views

Citrix Virtual Apps and Desktops 2402 - Custom Application menus cut off after VDA upgrade

After upgrading the VDA from VDA 1912 to VDA 2402, users may notice that the fonts and graphics are not fitting within the custom application UI. Issue is generally seen when the client display has high resolution. Setting the High DPI setting on the Citrix Workspace App for Windows to Yes, may...

7AI score
SaveExploits0
Rows per page
Query Builder