Lucene search
+L

2176 matches found

RedhatCVE
RedhatCVE
•added 2025/12/17 10:03 a.m.•10 views

CVE-2025-68082

Cross-Site Request Forgery CSRF vulnerability in SEMrush CY LTD Semrush Content Toolkit semrush-contentshake allows Cross Site Request Forgery.This issue affects Semrush Content Toolkit: from n/a through = 1.1.32...

5.4CVSS6.9AI score0.00114EPSS
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
•added 2025/12/09 6:00 p.m.•16 views

2025-12 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5071546)

2025-12 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5071546...

7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/12/09 6:00 p.m.•42 views

2025-12 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5071547)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 2025/12/09 8:00 a.m.•47 views

November 11, 2025—KB5068781 (OS Builds 19044.6575 and 19045.6575)

None None...

9.8CVSS6.8AI score0.05985EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2025/12/06 5:54 a.m.•8 views

CVE-2025-13860

The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the htags parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/05 6:16 a.m.•12 views

CVE-2025-13860

The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the htags parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00229EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/05 5:31 a.m.•104 views

CVE-2025-13860 Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the htags parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00229EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/05 12:00 a.m.•16 views

PT-2025-49220

The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the h tags parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5AI score0.00229EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/01 12:00 a.m.•10 views

PUB-A-427224084

In GetHostAddress of gxpbuffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00093EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/18 6:32 p.m.•11 views

EUVD-2025-198030

A remote command execution RCE vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS,...

6.5CVSS7AI score0.00346EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/11/14 12:01 a.m.•11 views

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

6.8CVSS7AI score0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•17 views

PT-2025-46892

🚨 CVE-2025-55810 A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card. šŸŽ–@cveNotify...

6.8CVSS6.9AI score0.00231EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/11/13 12:00 a.m.•22 views

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K model S-CW2503C-H with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card...

0.00231EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/12 4:47 p.m.•5 views

EUVD-2025-147695

Malicious code in tobrut-h-nubliesp npm...

6.6AI score
SaveExploits0
OSV
OSV
•added 2025/11/12 4:47 p.m.•0 views

MAL-2025-169117 Malicious code in tobrut-h-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e1f377a1e3826d7fcf7838d80440bb06a7e6c4a2122f8981536b924dceb5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/11/11 6:00 p.m.•37 views

2025-11 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5068781)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/11/11 6:00 p.m.•48 views

2025-11 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5068787)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

7AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 2025/11/11 6:00 p.m.•37 views

2025-11 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5068781)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•9 views

Microsoft Windows å®‰å…Øę¼ę“ž

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Administrator Protection. An attacker could exploit this vulnerability to gain elevated privileges. The following products and version...

7.8CVSS5.5AI score0.00359EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/11/06 12:00 a.m.•4 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990404 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in t...

7.8CVSS6.2AI score0.00294EPSS
SaveExploits0References4
Rows per page
Query Builder