Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/10/19 5:42 a.m.8 views

CVE-2025-11857

The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...

6.4CVSS5.1AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/10/18 6:15 a.m.2 views

CVE-2025-11857

The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...

6.4CVSS0.00032EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/18 5:41 a.m.3 views

CVE-2025-11857 XX2WP Integration Tools <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxpfb2wpdisplayembed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'postid' parameter. This makes it...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References3
CVE
CVE
added 2025/10/18 5:41 a.m.13 views

CVE-2025-11857

The CVE-2025-11857 entry pertains to the XX2WP Integration Tools WordPress plugin. Affected versions are all up to and including 1.9.9, with a Stored Cross-Site Scripting (Stored XSS) flaw in the mxp_fb2wp_display_embed shortcode caused by improper sanitization of the post_id parameter. This allo...

6.4CVSS4.8AI score0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/18 12:0 a.m.1 views

WordPress plugin XX2WP Integration Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References4
CNVD
CNVD
added 2025/05/28 12:0 a.m.3 views

JetBrains TeamCity Input Validation Error Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an input validatio...

6.1CVSS7.1AI score0.00004EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.3 views

The vulnerability of the IBM Security Directory Integrator, a software tool for synchronizing identity data, and the IBM Security Verify Directory Integrator, an integration tool, lies in their ability to disclose protected information by reading directory files.

The vulnerability of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software lies in their ability to disclose information by reading directory files. Exploiting this vulnerability allows a malicious actor to disclose protected information...

2.7CVSS5.4AI score0.00094EPSS
Exploits0References3Affected Software2
CNVD
CNVD
added 2025/02/18 12:0 a.m.1 views

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from a cross-site...

6.1CVSS5.8AI score0.27612EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.1 views

The vulnerabilities of the Dell EMC storage integration tool with VMware’s virtualization platform, the Dell Storage Integration Tools for VMware (DSITV); the data storage management tool that manages Dell EMC storage through VMware vSphere Client; the data replay management tool for virtual machines on the virtualization platform, Replay Manager for VMware (RMSV). These vulnerabilities allow attackers to disclose sensitive information.

The vulnerabilities of the Dell EMC storage integration tool with VMware’s virtualization platform, the Dell Storage Integration Tools for VMware DSITV; the data storage management tool that manages Dell EMC storage through VMware vSphere Client; and the virtual machine data replay management too...

5.5CVSS5.9AI score0.00055EPSS
Exploits0References2Affected Software3
NVD
NVD
added 2023/08/16 4:15 p.m.11 views

CVE-2023-39250

Dell Storage Integration Tools for VMware DSITV and Dell Storage vSphere Client Plugin DSVCP versions prior to 6.1.1 and Replay Manager for VMware RMSV versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this...

7.8CVSS7.2AI score0.00055EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/16 12:0 a.m.3 views

PT-2023-6517 · Dell · Dell Storage Integration Tools For Vmware +2

Name of the Vulnerable Software and Affected Versions: Dell Storage Integration Tools for VMware DSITV versions prior to 6.1.1 Dell Storage vSphere Client Plugin DSVCP versions prior to 6.1.1 Replay Manager for VMware RMSV versions prior to 3.1.2 Description: The issue is related to an informatio...

7.8CVSS5.1AI score0.00055EPSS
Exploits0References12
CNVD
CNVD
added 2021/05/12 12:0 a.m.8 views

JetBrains TeamCity Server-Side Request Forgery Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A server-side request forgery vulnerability exists...

7.5CVSS6.4AI score0.00005EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/05 12:0 a.m.12 views

Unspecified Vulnerability in JetBrains TeamCity

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in the...

7.5CVSS7AI score0.00002EPSS
Exploits1References1
Veeam
Veeam
added 2017/01/12 12:0 a.m.20 views

Dell EqualLogic Group Manager throws an error "Request target not found" after successful backup

Challenge After a successful backup of VMs stored on Dell EqualLogic storage especially when the option Allow processing of multiple VMs with a single volume snapshot is enabled you may receive an error in Group Manager "iSCSI login to target 'X.X.X.X:Y' from initiator 'X:X:X:X::Z' failed for...

6.8AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.9 views

VS 2005 - VSTF - TFC (Team Explorer)

...

2.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.12 views

BizTalk Server 2013.EN

Detectoid for English...

1.9AI score
Exploits0
Rows per page
Query Builder