Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/12/07 6:5 a.m.1 views

CVE-2025-13896

The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the igp-wp shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.1AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2025/12/06 6:15 a.m.1 views

CVE-2025-13896

The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the igp-wp shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00041EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/06 5:49 a.m.1 views

CVE-2025-13896 Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the igp-wp shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS4.8AI score0.00041EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/06 5:49 a.m.16 views

CVE-2025-13896 Social Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the igp-wp shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS0.00041EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/06 12:0 a.m.2 views

PT-2025-49350

The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the igp-wp shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.1AI score0.00041EPSS
Exploits0References6
Openbugbounty
Openbugbounty
added 2021/11/28 7:12 p.m.12 views

igp.com Cross Site Scripting vulnerability OBB-2286886

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Prion
Prion
added 2021/04/22 8:15 p.m.11 views

Race condition

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

4.3CVSS5.8AI score0.00334EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.12 views

CVE-2021-0270 Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

7.5CVSS7.8AI score0.00334EPSS
Exploits0References2
CVE
CVE
added 2021/04/22 7:37 p.m.40 views

CVE-2021-0270

CVE-2021-0270 impacts Juniper Networks Junos OS on PTX Series and QFX10K Series when the inline-Jflow feature is enabled. The issue is described as a use-after-free in the Packet Forwarding Engine (PFE) microkernel, leading to a DoS through restarting one or more FPCs and generating core files du...

7.5CVSS6.1AI score0.00334EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/08/07 10:15 p.m.2 views

CVE-2019-1918

A vulnerability in the implementation of Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

7.4CVSS7.1AI score0.00087EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2010/04/29 12:0 a.m.253 views

Mandriva Update for ldetect-lst MDVA-2010:125 (ldetect-lst)

Check for the Version of ldetect-lst OpenVAS Vulnerability Test Mandriva Update for ldetect-lst MDVA-2010:125 ldetect-lst Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

9.3CVSS9.4AI score0.42703EPSS
Exploits6References2
Rows per page
Query Builder