Lucene search
+L

9109 matches found

Snyk
Snyk
•added 2025/09/27 10:41 p.m.•4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the dumpdwarfsection function. An attacker can cause a denial of service by providing specially crafted input that triggers an out-of-bounds read during processing. Remediation A fix was pushed into the master...

5.3CVSS6AI score0.00208EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 12:43 p.m.•10 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the loadDocImpl function. An attacker can cause a denial of service by triggering a null pointer dereference through local access to the affected component. Remediation Upgrade behaviortree.cpp to version...

5.5CVSS5.2AI score0.00208EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 11:44 a.m.•10 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the fromJson function. An attacker can cause a denial of service by providing a crafted argument to trigger a null pointer dereference. Remediation Upgrade behaviortree.cpp to version 4.9.0 or higher...

5.5CVSS5.2AI score0.00209EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 11:44 a.m.•15 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the fromJson function. An attacker can cause a denial of service by providing a crafted argument to trigger a null pointer dereference. Remediation A fix was pushed into the master branch but not yet...

4.8CVSS5.2AI score0.00209EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 11:44 a.m.•28 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the uclincludecommon function. An attacker can execute arbitrary code or cause a denial of service by supplying crafted input to this function. Remediation A fix was pushed into the master branch but not y...

5.3CVSS6.4AI score0.00163EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/26 11:44 a.m.•14 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the ParseScript function in the Diagnostic Message Handler component of scriptparser.cpp. An attacker can execute arbitrary code or cause a denial of service by providing a specially crafted argument to...

5.3CVSS6.4AI score0.0025EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 12:00 a.m.•5 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via improper handling of memory buffers in asnbuildobjid in lib/snmplib/asn1.c. An attacker can cause a denial of service by sending specially crafted input that triggers a buffer overflow. Remediation A fix...

8.8CVSS5.8AI score0.00408EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•19 views

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

6.5CVSS5.9AI score0.00216EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/09/22 7:16 p.m.•12 views

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider allows Stored XSS. This issue affects Master Slider: from n/a through 3.11.0...

5.4CVSS5.8AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•17 views

CVE-2025-58025

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

6.5CVSS0.00216EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/22 6:55 p.m.•17 views

WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Master Slider versions = 3.11.0...

6.5CVSS6AI score0.00216EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2025/09/22 6:23 p.m.•34 views

CVE-2025-58025 WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

6.5CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:23 p.m.•33 views

CVE-2025-58025

CVE-2025-58025: Master Slider (Master Slider – Responsive Touch Slider) suffers Stored Cross-Site Scripting in the WordPress plugin Master Slider &lt;= 3.11.0. The vulnerability is documented with CVSS v3.1 base score 5.4 (Network attack, Low attack complexity; User interaction required; Confiden...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:23 p.m.•8 views

CVE-2025-58025 WordPress Master Slider Plugin <= 3.11.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/22 2:29 p.m.•20 views

Write-what-where Condition

Overview Affected versions of this package are vulnerable to Write-what-where Condition in the TIFFReadRGBAImageOriented function while processing paletted images with malformed metadata. TIFF file. An attacker can achieve arbitrary memory write by convincing a user to open a specially crafted TI...

8.8CVSS6.5AI score0.0097EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/22 2:13 p.m.•20 views

Security Bulletin: IBM Master Data Management is vulnerable to arbitrary code execution from vulnerability in WebSphere Application Server (CVE-2025-36038)

Summary IBM Master Data Management is vulnerable to arbitrary code execution by a vulnerability found in IBM WebSphere Application Server. IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of...

9.8CVSS8.8AI score0.13306EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•18 views

PT-2025-38874

Name of the Vulnerable Software and Affected Versions averta Master Slider versions through 3.11.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code can be inject...

6.5CVSS6.2AI score0.00216EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•15 views

WordPress plugin Master Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•4 views

CVE-2025-58025: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through = 3.11.0...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/21 9:41 a.m.•15 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to an improper fix for CVE-2025-6507. An attacker can execute arbitrary code and access unauthorized system files by injecting malicious parameters that bypass regular expression filters by adding...

9.8CVSS8.3AI score0.16938EPSS
SaveExploits1References2
Rows per page
Query Builder