10901 matches found
CVE-2019-25154
Inappropriate implementation in iframe in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2019-6146
It has been reported that cross-site scripting XSS is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 Medium /AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...
CVE-2019-19097
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection...
SUSE SLES12 Security Update : brltty (SUSE-SU-2025:1583-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:1583-1 advisory. - Avoid having brlapi.key temporarily world-readable during creation bsc1235438. Tenable has extracted the preceding description block directly from th...
WordPress Butcher Theme <= 2.40 is vulnerable to Cross Site Scripting (XSS)
Software Butcher Type Theme Vulnerable versions = 2.40 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-32285 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fe6f8cbe33e0 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
WordPress Hot Random Image plugin <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter vulnerability
Path Traversal to Authenticated Contributor+ Limited Arbitrary Image Access via path Parameter vulnerability discovered by Kishan Vyas in WordPress Plugin Hot Random Image versions = 1.9.2...
Quantum Steganography Using Catalytic and Entanglement-Assisted Quantum Codes
Steganography is the technique for transmitting a secret message by employing subterfuge to conceal it in innocent-looking data, rather than by overt security measures as in cryptography. Typically, non-degenerate quantum error-correcting codes QECCs are used as the cover medium, with the stego...
WordPress Order Delivery Date Pro for WooCommerce plugin < 12.4.0 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Order Delivery Date for WP e-Commerce versions 12.4.0...
WordPress Goodlayers Hotel plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Goodlayers Hotel versions = 3.1.4...
WordPress Goodlayers Hostel Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Goodlayers Hostel versions = 3.1.2...
WordPress Formulario de contacto SalesUp! plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Formulario de contacto SalesUp! versions = 1.0.14...
WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin School Management versions = 92.0.0...
WordPress WP Post Modules for Elementor plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin WP Post Modules for Elementor versions = 2.5.0...
WordPress Plugin Oficial – Getnet para WooCommerce plugin < 1.8.1 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Plugin Oficial – Getnet para WooCommerce versions 1.8.1...
WordPress wooexim plugin <= 5.0.0 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WOOEXIM versions = 5.0.0...
WordPress Spiritual Gifts Survey plugin <= 0.9.10 - Unauthenticated CSRF to XSS vulnerability
Unauthenticated CSRF to XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Spiritual Gifts Survey versions = 0.9.10...
WordPress Event Calendar plugin <= 1.0.4 - Unauthenticated Arbitrary Calendar Deletion vulnerability
Unauthenticated Arbitrary Calendar Deletion vulnerability discovered by Bob Matyas in WordPress Plugin Event Calendar versions = 1.0.4...
WordPress MapFig Studio plugin <= 0.2.1 - Stored XSS via CSRF vulnerability
Stored XSS via CSRF vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin MapFig Studio versions = 0.2.1...
WordPress profilepro plugin <= 1.3 - Subscriber+ Stored Cross Site Scripting vulnerability
Subscriber+ Stored Cross Site Scripting vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin profilepro versions = 1.3...