CVE-2025-55059

CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55058

CWE-20 Improper Input Validation...

CVE-2025-55058

CVE-2025-55058 is tied to CWE-20 Improper Input Validation. Public records (NVD, Red Hat, EUVD, CVE list, CNNVD) cite an input validation error, with CNNVD naming Maxum Rumpus FTP Server as affected (version 9.0.12) in their entry. Evidence does not consistently specify vendor/product coverage ac...

CVE-2025-55058

CWE-20 Improper Input Validation...

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

EUVD-2025-197851

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-40834

CVE-2025-40834 affects the Mendix RichText widget. All versions from 4.0.0 up to 4.6.0 are vulnerable because the widget does not properly neutralize user input, enabling cross-site scripting (XSS). The issue is rooted in insufficient input filtering/escaping within the RichText component. Impact...

Denial-of-service (DoS)

financejs is vulnerable to a Denial-of-service DoS. The vulnerability is due to improper handling of input in the seekZero parameter, which allows an attacker to trigger excessive computation and cause the application to become unresponsive...

Improper Input Validation

@nubosoftware/node-static is vulnerable to improper input validation.The vulnerability is due to the package failing to handle null-byte %00 input correctly, which allows an attacker to trigger an exception and crash the server...

PT-2025-47182

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The software suffers from improper input validation. This can lead to potential security risks. Recommendations At the moment, there is no information about a...

Maxum Rumpus FTP Server 操作系统命令注入漏洞

Maxum Rumpus FTP Server is an FTP server software from Maxum. An operating system command injection vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper neutralization of a special element and can lead to OS command injection...

CVE-2025-13033

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the emai...

Devolutions Server <= 2025.2.15.0 Improper Input Validation (DEVO-2025-0015) (CVE-2025-11958)

The version of Devolutions Server installed on the remote host is prior or equal to 2025.2.15.0 and is, therefore, affected by an improper authorization vulnerability: - An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows a...

CVE-2025-64383

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Qode Qi Blocks qi-blocks allows Stored XSS.This issue affects Qi Blocks: from n/a through = 1.4.3...

CVE-2025-64275

CVE-2025-64275 affects the WordPress Booking Manager plugin. A Stored Cross-Site Scripting (XSS) flaw arises from improper input neutralization during web page generation in Booking Manager versions up to and including 2.1.17. Exploitation could allow injected scripts to run in pages viewed by ot...

Improper Input Validation

mkdocs-include-markdown-plugin is vulnerable to improper input validation. The vulnerability is due to unvalidated input colliding with substitution placeholders, which allows an attacker to manipulate included Markdown content and potentially inject or alter data...

Improper Input Validation

github.com/opencontainers/runc is vulnerable to improper input validation. The vulnerability is due to insufficient verification of the bind-mount source /dev/null, which allows an attacker to exploit it via arbitrary mount manipulation, leading to host information disclosure, denial of service,...

CVE-2025-33000

Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result ma...