Lucene search
+L

1312 matches found

RedhatCVE
RedhatCVE
added 2025/04/10 4:0 a.m.16 views

CVE-2025-31475

tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with direct access to the site's source code ...

5.5CVSS7.4AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/10 12:0 a.m.7 views

PT-2025-15917 · WordPress · Wp-Geshi-Highlight

Name of the Vulnerable Software and Affected Versions: WP-GeSHi-Highlight versions 1.4.3 and earlier Description: The WP-GeSHi-Highlight WordPress plugin processes user-supplied input as a regular expression via the wp geshi filter replace code function, which could lead to a Regular Expression...

6.5CVSS6.8AI score0.00432EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/04/10 12:0 a.m.11 views

PT-2025-15986 · Ibm · Ibm Maximo Application Suite

Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite versions 8.11 through 9.0 Description: The issue is related to improper input validation, allowing an authenticated user to perform unauthorized actions. Recommendations: For versions 8.11 through 9.0, update to a...

6.5CVSS5.9AI score0.00311EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/04/08 5:33 a.m.10 views

CVE-2024-47261

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...

4.3CVSS7.1AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/08 5:33 a.m.30 views

CVE-2024-47261

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device...

4.3CVSS0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.9 views

PT-2025-15236 · Unknown · Tarteaucitron.Js

Name of the Vulnerable Software and Affected Versions: tarteaucitron.js versions prior to 1.20.1 Description: A vulnerability was identified in the addOrUpdate function of tarteaucitron.js, which did not properly validate input. This allowed an attacker with direct access to the site's source cod...

5.5CVSS6.9AI score0.00322EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/04/04 12:0 a.m.24 views

Mitel MiCollab <= 9.8 SP2 (9.8.2.12) Multiple Vulnerabilities (MISA-2024-0029)

According to its self-reported version, the instance of Mitel MiCollab running on the remote web server is prior to 9.8 SP2 9.8.2.12 and is, therefore, affected by multiple vulnerabilities: - A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2...

9.1CVSS8.8AI score0.9811EPSS
SaveExploits3References3
OSV
OSV
added 2025/04/03 2:16 p.m.7 views

BIT-JOOMLA-2023-23754 [20230501] - Core - Open Redirect and XSS within the mfa select

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue within the new mfa selection screen...

6.1CVSS6.1AI score0.00406EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/03 2:10 p.m.10 views

BIT-JOOMLA-2020-24598

An issue was discovered in Joomla! before 3.9.21. Lack of input validation in the vote feature of comcontent leads to an open redirect...

6.1CVSS7AI score0.01EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/03 2:10 p.m.9 views

BIT-JOOMLA-2020-13762

In Joomla! before 3.9.19, incorrect input validation of the module tag option in commodules allows XSS...

6.1CVSS7.1AI score0.00957EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/03 2:10 p.m.10 views

BIT-JOOMLA-2020-13761

In Joomla! before 3.9.19, lack of input validation in the heading tag option of the "Articles - Newsflash" and "Articles - Categories" modules allows XSS...

6.1CVSS7.1AI score0.00957EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/03 2:6 p.m.64 views

BIT-DOLIBARR-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code...

8.8CVSS8.1AI score0.32845EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/02 11:37 p.m.8 views

CVE-2025-30452

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue was addressed...

9.8CVSS5.8AI score0.01054EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/02 9:15 p.m.25 views

CVE-2025-30080

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service software abort...

7.5CVSS0.00515EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/31 11:15 p.m.15 views

CVE-2025-30452

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue was addressed...

9.8CVSS0.01054EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/03/31 10:22 p.m.26 views

CVE-2025-30452

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue was addressed...

0.01054EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/31 10:22 p.m.13 views

CVE-2025-30452

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An input validation issue was addressed...

5.8AI score0.01054EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/03/31 12:0 a.m.3 views

PT-2025-13982 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: An input validation issue was addressed with improved checks. Recommendations: For macOS Ventura versions prior to...

9.8CVSS5.8AI score0.01054EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/03/28 5:35 p.m.13 views

CVE-2024-45351

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

7.8CVSS7.9AI score0.00183EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/03/27 12:31 p.m.13 views

CVE-2024-9773 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 14.9 before 17.8.6, all versions starting from 17.9 before 17.8.3, all versions starting from 17.10 before 17.10.1. An input validation issue in the Harbor registry integration could have allowed a maintainer to add malicio...

3.7CVSS4.1AI score0.00244EPSS
SaveExploits1References2
Rows per page
Query Builder