Lucene search
+L

1300 matches found

Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.8 views

PT-2025-53243

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TouchOfTech Draft Notify draft-notify allows Stored XSS.This issue affects Draft Notify: from n/a through = 1.5...

5.4CVSS6AI score0.00179EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/12/21 9:18 a.m.7 views

WordPress Draft Notify plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin Draft Notify versions = 1.5...

5.4CVSS6.1AI score0.00179EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.16 views

CVE-2025-14446

The Popup Builder Easy Notify Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the easynotifycpreset function in all versions up to, and including, 1.1.37. This makes it possible for authenticated attackers, with Subscriber-level...

6.5CVSS5.1AI score0.00221EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.9 views

EUVD-2025-203200

The Popup Builder Easy Notify Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the easynotifycpreset function in all versions up to, and including, 1.1.37. This makes it possible for authenticated attackers, with Subscriber-level...

6.5CVSS4.6AI score0.00221EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.8 views

PT-2025-51073

The Popup Builder Easy Notify Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the easynotify cp reset function in all versions up to, and including, 1.1.37. This makes it possible for authenticated attackers, with Subscriber-level...

6.5CVSS5.1AI score0.00221EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.8 views

WordPress plugin Popup Builder (Easy Notify Lite) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.3AI score0.00221EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/12 12:25 a.m.6 views

SUSE CVE-2025-59030

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS7AI score0.00504EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/09 6:30 p.m.5 views

EUVD-2025-201912

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS6.4AI score0.00504EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/09 5:27 p.m.6 views

CVE-2025-22432

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.8AI score0.00097EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/09 4:17 p.m.6 views

CVE-2025-59030

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS0.00504EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.6 views

UBUNTU-CVE-2025-59030

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS5.8AI score0.00504EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2025/12/09 9:15 a.m.8 views

CVE-2025-59030

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS6.7AI score0.00504EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/12/09 9:15 a.m.34 views

CVE-2025-59030 Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS0.00504EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/09 9:15 a.m.6 views

CVE-2025-59030 Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP...

7.5CVSS6AI score0.00504EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.10 views

PowerDNS Recursor 安全漏洞

PowerDNS Recursor pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability exists in PowerDNS Recursor that stems from a TCP NOTIFY query that could result in the deletion of cache records...

7.5CVSS6.4AI score0.00504EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/08 5:16 p.m.5 views

CVE-2025-22432

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.9AI score0.00097EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/08 4:56 p.m.36 views

CVE-2025-22432

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...

0.00097EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/07 12:30 a.m.3 views

EUVD-2025-201582

In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...

5.9AI score0.00171EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/06 10:15 p.m.3 views

DEBIAN-CVE-2025-40273

In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...

5.4AI score0.00171EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/12/04 3:31 p.m.7 views

CVE-2025-40237

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfsencodefid with sumount Calling intotifyshowfdinfo on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr. This issue was found by syzkaller. Race...

5.2AI score0.00178EPSS
SaveExploits0
Rows per page
Query Builder