CVE-2025-48356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Isra Kanpress kanpress allows Stored XSS.This issue affects Kanpress: from n/a through = 1.1...

CVE-2025-48323

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md Abunaser Khan Advance Food Menu advance-food-menu allows Stored XSS.This issue affects Advance Food Menu: from n/a through = 1.0...

CVE-2025-48314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in salubrio Add Code To Head add-code-to-head allows Stored XSS.This issue affects Add Code To Head: from n/a through = 1.17...

CVE-2025-48358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in everythingwp Risk Free Cash On Delivery COD - WooCommerce risk-free-cash-on-delivery-cod-woocommerce allows Stored XSS.This issue affects Risk Free Cash On Delivery COD - WooCommerce: from n/a...

CVE-2025-48305

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vikingjs Goal Tracker for Patreon goal-tracker-for-patreon allows Stored XSS.This issue affects Goal Tracker for Patreon: from n/a through = 0.4.6...

CVE-2025-48365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imaprogrammer Custom Comment customcomment allows Stored XSS.This issue affects Custom Comment: from n/a through = 2.1.6...

CVE-2025-48319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gslauraspeck Mesa Mesa Reservation Widget mesa-mesa-reservation-widget allows Stored XSS.This issue affects Mesa Mesa Reservation Widget: from n/a through = 1.0.0...

CVE-2025-54731

Improper Control of Generation of Code 'Code Injection' vulnerability in emarket-design YouTube Showcase youtube-showcase allows Object Injection.This issue affects YouTube Showcase: from n/a through = 3.5.1...

Detecting Stealthy Data Poisoning Attacks in AI Code Generators

Deep learning DL models for natural language-to-code generation have become integral to modern software development pipelines. However, their heavy reliance on large amounts of data, often collected from unsanitized online sources, exposes them to data poisoning attacks, where adversaries inject...

Ivanti Cloud Services Appliance Path Traversal Code Execution

The vulnerability of the Ivanti Cloud Services Appliance relates to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Dell PowerScale InsightIQ Uncontrolled Resource Consumption DoS

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger service interruptions...

IBM QRadar Suite Security Analytics Code Execution

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to improper code generation management. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...

IBM Integration Bus Code Execution

The vulnerability of the software for integrating IBM Integration Bus applications is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Mozilla Firefox Thunderbird Code Execution

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

com.ritense.valtimo:besluit (11.2.2.release), com.ritense.valtimo:besluiten-api (11.2.2.release) +29 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (11.2.2.release)

com.ritense.valtimo:core MAVEN version 11.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:besluit 11.2.2.release - com.ritense.valtimo:besluiten-api 11.2.2.release -...

com.ritense.valtimo:besluiten-api (0.0.0-test), com.ritense.valtimo:building-block (0.0.0-test) +30 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (0.0.0-test)

com.ritense.valtimo:core MAVEN version 0.0.0-test is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:besluiten-api 0.0.0-test - com.ritense.valtimo:building-block 0.0.0-test -...

com.ritense.valtimo:document-generation (9.1.0.release), com.ritense.valtimo:external-event (9.1.0.release) +9 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (9.1.0.release)

com.ritense.valtimo:core MAVEN version 9.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:document-generation 9.1.0.release - com.ritense.valtimo:external-event 9.1.0.releas...

com.ritense.valtimo:document-generation (9.2.0.release), com.ritense.valtimo:external-event (9.2.0.release) +9 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (9.2.0.release)

com.ritense.valtimo:core MAVEN version 9.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:document-generation 9.2.0.release - com.ritense.valtimo:external-event 9.2.0.releas...

com.ritense.valtimo:besluit (9.7.0.release), com.ritense.valtimo:contactmoment (9.7.0.release) +14 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (9.7.0.release)

com.ritense.valtimo:core MAVEN version 9.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:besluit 9.7.0.release - com.ritense.valtimo:contactmoment 9.7.0.release -...

com.ritense.valtimo:besluit (9.7.1.release), com.ritense.valtimo:contactmoment (9.7.1.release) +15 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (9.7.1.release)

com.ritense.valtimo:core MAVEN version 9.7.1.release is affected by a known vulnerability. The following packages have a transitive dependency on com.ritense.valtimo:core and may be impacted: - com.ritense.valtimo:besluit 9.7.1.release - com.ritense.valtimo:contactmoment 9.7.1.release -...