Lucene search
+L

11341 matches found

CNNVD
CNNVD
added 2025/06/09 12:00 a.m.9 views

WordPress plugin Backup and Staging by WP Time Capsule 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Backup and Staging by WP Time Capsule plugin that stems from improper input neutralization and can be exploited by a...

7.1CVSS6.2AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.8 views

WordPress plugin WBW Product Table PRO SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS7.7AI score0.0036EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/09 12:00 a.m.13 views

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/06/08 1:19 p.m.13 views

CVE-2025-49318

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPtouch WPtouch wptouch allows Stored XSS.This issue affects WPtouch: from n/a through = 4.3.60...

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/08 12:15 p.m.7 views

CVE-2025-27131

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

5.5CVSS5.8AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/08 12:15 p.m.17 views

CVE-2025-27242

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

5.5CVSS0.00114EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/08 12:15 p.m.8 views

CVE-2025-27242

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/08 11:47 a.m.13 views

CVE-2025-27242 Ssecurity_component_manager has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

3.3CVSS5.7AI score0.00114EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/08 11:46 a.m.30 views

CVE-2025-27131 kernel_liteos_m has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

6.1CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/08 11:46 a.m.11 views

CVE-2025-27131 kernel_liteos_m has an improper input vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input...

6.1CVSS7AI score0.00117EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/08 11:46 a.m.64 views

CVE-2025-27131

CVE-2025-27131 affects OpenHarmony v5.0.3 and earlier. The issue is an improper input handling vulnerability in the kernel_liteos_m stack that enables a local attacker to cause a denial-of-service. The MITRE-style CVE entry lists a local attack vector with LOW privileges and LOW complexity, resul...

6.1CVSS6.2AI score0.00117EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/06/06 1:15 p.m.10 views

CVE-2025-49306

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget allows Stored XSS. This issue affects WP Social Widget: from n/a through 2.3...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/06 1:15 p.m.6 views

CVE-2025-49262

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shaonsina Sina Extension for Elementor allows Stored XSS. This issue affects Sina Extension for Elementor: from n/a through 3.6.1...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.9 views

B. Braun onlinesuite 安全漏洞

B. Braun onlinesuite is a digital management platform for healthcare applications from B. Braun, Germany. A security vulnerability exists in B. Braun onlinesuite that stems from improper neutralization of expression language input and could lead to remote code execution...

10CVSS7.8AI score0.00561EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:00 a.m.6 views

PT-2025-24158 · Unknown · Acf: Yandex Maps Field

Name of the Vulnerable Software and Affected Versions: ACF: Yandex Maps Field versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in ACF: Yandex Maps Field...

5.9CVSS5.2AI score0.00212EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.8 views

WordPress plugin 404 Page by SeedProd 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

5.9CVSS5.3AI score0.00225EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.5 views

WordPress plugin Event post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.10 views

WordPress plugin Greenshift 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00215EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/06 12:00 a.m.13 views

FreeScout Cross-Site Scripting Vulnerability (CNVD-2025-20799)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input by email signatures. No detailed vulnerability...

6.3CVSS6.3AI score0.00146EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/06 12:00 a.m.9 views

WordPress plugin Simple Nested Menu 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS6.1AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder