11341 matches found
PT-2025-7750 · Unknown · Ez Inlinkz Linkup
Name of the Vulnerable Software and Affected Versions: EZ InLinkz linkup versions 0.18 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially...
PT-2025-7734 · Unknown · Contact Form 7 Star Rating With Font Awesome
Name of the Vulnerable Software and Affected Versions: Contact Form 7 Star Rating with font Awesome versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Stored XSS. This allows for malicious scripts to be stor...
PT-2025-7713
Name of the Vulnerable Software and Affected Versions T-Soft E-Commerce versions prior to 5 Description The issue affects T-Soft E-Commerce, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations For versions prior to 5, update to...
PT-2025-7747 · Unknown · Video.Js Hls Player
Name of the Vulnerable Software and Affected Versions: Video.js HLS Player versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a DOM-Based XSS...
WordPress plugin Quotes llama 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-7725 · Unknown · Alobaidi Archive Page
Name of the Vulnerable Software and Affected Versions: Alobaidi Archive Page versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically DOM-Based XSS...
Eaton Network-M2 安全漏洞
Eaton Network-M2 is a wireless network card from Eaton Corporation USA. A security vulnerability exists in the Eaton Network-M2 that stems from the inclusion of an improper input validation issue that could lead to command execution...
TawkTo Widget 安全漏洞
TawkTo Widget is a widget design program from TawkTo, Inc. A security vulnerability exists in TawkTo Widget version 1.3.7 and earlier, which stems from mishandling of user input, resulting in a cross-site scripting XSS vulnerability that allows JavaScript execution...
Siemens SCALANCE W700 Improper Input Validation (CVE-2023-28578)
Memory corruption in Core Services while executing the command for removing a single event listener. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
PT-2025-7762 · Unknown · Wp Social Seo Booster
Name of the Vulnerable Software and Affected Versions: WP Social SEO Booster – Knowledge Graph Social Signals SEO versions 1.2.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability...
WordPress plugin Direct Checkout Button for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress plugin Reactive Mortgage Calculator 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Siemens SCALANCE W700 Improper Input Validation (CVE-2023-31315)
Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE W700 Improper Input Validation (CVE-2025-24499)
Affected devices do not properly validate input while loading the configuration files. This could allow an authenticated remote attacker to execute arbitrary shell commands on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CLSA-2025-1740051873 tomcat: Fix of CVE-2024-24549
CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests...
Remote Code Execution (RCE)
jsonpath-plus is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper input sanitization, specifically because of the unsafe default usage of eval='safe' mode, which allows an attacker to execute arbitrary code on the system...
ROS-20250219-05
A vulnerability in the Core component of Oracle VM VirtualBox is related to a flaw in the authorization mechanism. authorization mechanism. Exploitation of the vulnerability could allow an attacker to gain privileged access to the infrastructure A vulnerability in the Core component of the Oracle...
WordPress plugin Drivr Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
The vulnerability of the sysctl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the sysctl component in the Linux operating system’s kernel is related to improper validation of input data in the procsysmake inode function. Exploiting this vulnerability can allow an attacker to cause a service failure...