Lucene search
+L

321 matches found

Mageia
Mageia
•added 2026/03/06 3:01 a.m.•28 views

Updated vim packages fix security vulnerabilities

OS Command Injection in netrw affects Vim 9.2.0073. CVE-2026-28417 Heap-based Buffer Overflow in Emacs tags parsing affects Vim 9.2.0074. CVE-2026-28418 Heap-based Buffer Underflow in Emacs tags parsing affects Vim 9.2.0075. CVE-2026-28419 Heap-based Buffer Overflow and OOB Read in :terminal...

7.8CVSS6.5AI score0.01427EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2025/12/15 1:30 p.m.•15 views

WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Zeeshan Haider in WordPress Plugin Highlight and Share versions = 5.2.0...

5.3CVSS7AI score0.0044EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/10 2:23 p.m.•12 views

CVE-2025-67586

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

4.7CVSS7AI score0.0044EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•21 views

EUVD-2025-202067

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

5.3CVSS6.5AI score0.0044EPSS
SaveExploits2References2
NVD
NVD
•added 2025/12/09 4:18 p.m.•23 views

CVE-2025-67586

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

4.7CVSS0.0044EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/12/09 2:14 p.m.•42 views

CVE-2025-67586 WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

4.7CVSS0.0044EPSS
SaveExploits2References1
CVE
CVE
•added 2025/12/09 2:14 p.m.•79 views

CVE-2025-67586

CVE-2025-67586 corresponds to a Missing Authorization vulnerability in the WordPress plugin Highlight and Share (highlight-and-share). Public details in connected docs confirm affected software: Highlight and Share (WordPress plugin) vulnerable up to version 5.2.0. The CVE has CVSS v3.1 base scor...

4.7CVSS6AI score0.0044EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:14 p.m.•2 views

CVE-2025-67586 WordPress Highlight and Share plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

4.7CVSS6AI score0.0044EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•20 views

WordPress plugin Highlight and Share 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.7CVSS6.7AI score0.0044EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•3 views

CVE-2025-67586: Missing Authorization

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

4.7CVSS5.9AI score0.0044EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•26 views

PT-2025-49960

Name of the Vulnerable Software and Affected Versions Ronald Huereca Highlight and Share versions through 5.2.0 Description A missing authorization issue exists in Ronald Huereca Highlight and Share, allowing exploitation of incorrectly configured access control security levels. Recommendations...

5.3CVSS6.5AI score0.0044EPSS
SaveExploits2References4
CNVD
CNVD
•added 2025/11/27 12:00 a.m.•36 views

WordPress Just Highlight plugin cross-site scripting vulnerability

WordPress Just Highlight plugin is a WordPress plugin mainly used for highlighting code snippets in posts or pages with syntax highlighting support. WordPress Just Highlight plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and...

4.4CVSS6.2AI score0.00218EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/26 7:58 a.m.•34 views

CVE-2025-13311

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS5AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/25 8:15 a.m.•26 views

CVE-2025-13311

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS0.00218EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 7:28 a.m.•22 views

CVE-2025-13311 Just Highlight <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS0.00218EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/25 7:28 a.m.•32 views

CVE-2025-13311

Affected product/engine: WordPress Just Highlight plugin (for code highlighting). Vulnerability: Stored Cross-Site Scripting via the “Highlight Color” setting. Versions impacted: all versions up to and including 1.0.3. Root cause/Vector: insufficient input sanitization and output escaping, enabli...

4.4CVSS6.1AI score0.00218EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 7:28 a.m.•11 views

EUVD-2025-199567

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS4.6AI score0.00218EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/25 7:28 a.m.•7 views

CVE-2025-13311 Just Highlight <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS6.1AI score0.00218EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/11/25 12:01 a.m.•15 views

WordPress Just Highlight plugin <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via 'Highlight Color' Setting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Just Highlight versions = 1.0.3...

4.4CVSS5.8AI score0.00218EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•21 views

PT-2025-48003

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

4.4CVSS5AI score0.00218EPSS
SaveExploits0References4
Rows per page
Query Builder