Lucene search
+L

11339 matches found

CNNVD
CNNVD
added 2025/03/03 12:00 a.m.7 views

WordPress plugin Guten Free Options 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

7.1CVSS5.9AI score0.00378EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.6 views

WordPress plugin Maniac SEO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.5 views

WordPress plugin Page Health-O-Meter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.6AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.7 views

WordPress plugin Affiliate Links Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.8CVSS8.2AI score0.00198EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.11 views

WordPress plugin Woocommerce osCommerce Sync 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS8.1AI score0.00288EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.6 views

WordPress plugin Goodlayers Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

7.1CVSS5.9AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.9 views

WordPress plugin Login Watchdog 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS5.7AI score0.00382EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/02 12:21 a.m.19 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

8CVSS7.3AI score0.00409EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/01 12:20 a.m.15 views

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

9.8CVSS6.9AI score0.00426EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/28 7:15 p.m.30 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

8CVSS0.00409EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/02/28 12:00 a.m.42 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

0.00409EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/02/28 12:00 a.m.9 views

CVE-2025-25635

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...

7.7AI score0.00409EPSS
SaveExploits1References1
CVE
CVE
added 2025/02/28 12:00 a.m.104 views

CVE-2025-25635

The CVE-2025-25635 entry concerns TOTOlink A3002R firmware version V1.1.1-B20200824.0128, where the vulnerability is a buffer overflow caused by improper validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa. Affected component: the device firmware (TOTOLINK A3002R). I...

8CVSS7.5AI score0.00409EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/02/27 11:15 p.m.8 views

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

9.8CVSS5.8AI score0.00426EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/27 5:03 p.m.15 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework [CVE-2024-38809]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework, caused by improper input validation CVE-2024-38809. Spring Framework is used by our Speech Microservices. This vulnerabilitiy has been addressed. Please read the details for remediation below...

5.3CVSS6.8AI score0.00852EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2025/02/27 7:27 a.m.9 views

Cross-Site Scripting (XSS)

leantime/leantime is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization and output encoding of the title field in a To-Do, allows an attacker to inject and execute arbitrary JavaScript in a victim's browser...

6.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/02/27 12:00 a.m.10 views

PT-2025-8921

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A reflected cross-site scripting XSS issue exists due to improper input validation, allowing an attacker to inject malicious JavaScript into server responses from vulnerable service...

6.1CVSS5.5AI score0.00224EPSS
SaveExploits0References7
CVE
CVE
added 2025/02/27 12:00 a.m.80 views

CVE-2024-36047

Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...

9.8CVSS6.7AI score0.00426EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/27 12:00 a.m.7 views

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

9.6AI score0.00426EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/27 12:00 a.m.29 views

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

0.00426EPSS
SaveExploits0References1
Rows per page
Query Builder