271 matches found
EUVD-2025-201510
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input sanitization and output escaping on Google Reviews data imported by the plugin. This makes it possible for unauthenticated...
CVE-2025-12510
The CVE 2025-12510 entry concerns the WordPress plugin Widgets for Google Reviews (aka Widgets for Google Reviews) vulnerable to unauthenticated stored XSS via Google Reviews data. Affected versions are up to and including 13.2.4; the root cause is insufficient input sanitization and output escap...
PT-2025-49325
Name of the Vulnerable Software and Affected Versions Widgets for Google Reviews versions prior to 13.2.5 Description The Widgets for Google Reviews plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping when handling Google...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.0.1, which stems from improper acces...
EUVD-2022-42753
Malicious code in bioql PyPI...
EUVD-2021-9347
Malicious code in bioql PyPI...
EUVD-2022-15516
Malicious code in bioql PyPI...
EUVD-2022-43038
Malicious code in bioql PyPI...
EUVD-2023-54807
Malicious code in bioql PyPI...
EUVD-2022-42721
Malicious code in bioql PyPI...
EUVD-2025-25033
Malicious code in bioql PyPI...
EUVD-2023-43883
Malicious code in bioql PyPI...
EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2025-2037)
According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect...
Linux Distros Unpatched Vulnerability : CVE-2021-39944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all version...
Linux Distros Unpatched Vulnerability : CVE-2021-3565
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM...
Linux Distros Unpatched Vulnerability : CVE-2019-9834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Netdata web application through 1.13.0 allows remote attackers to inject their own malicious HTML code into an imported snapshot, aka HTML Injection...
Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2025-0017)
The 2025 version of Autodesk AutoCAD installed on the remote Windows host is a version prior to 2026.1. It is, therefore, affected by multiple vulnerabilities: - A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicio...
WSDL Import Success
WSDL schema file was successfully imported and can be used during the scan. No source data...
CVE-2025-5048 DGN File Parsing Memory Corruption Vulnerability
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
