CVE-2024-43414

Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incrementally. Instances of @apollo/query-planner =2.0.0 and =2.0.0 and 2.8.5 and Apollo Router 1.52.1...

CVE-2025-23631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through = 1.0...

CVE-2025-23631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through = 1.0...

CVE-2025-23631 WordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through = 1.0...

CVE-2025-23631 WordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Content Planner allows Reflected XSS. This issue affects Content Planner: from n/a through 1.0...

CVE-2025-23631

CVE-2025-23631 : Reflected XSS in Content Planner. NotFound Content Planner is vulnerable due to improper input neutralization during web page generation, affecting Content Planner versions from none/n/a up to 1.0. CVSS 3.1 base score 7.1 (HIGH); attack vector: NETWORK, user interaction required,...

WordPress plugin Content Planner has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-23631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through = 1.0...

PT-2025-4989 · Unknown · Notfound Content Planner

Name of the Vulnerable Software and Affected Versions: NotFound Content Planner versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions...

WordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Content Planner versions = 1.0...

MAL-2024-11906 Malicious code in supply-chain-planner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04d233f8a8aea9243490197311b90d7313bce41848541de6447f1c8538b4448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in supply-chain-planner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in supply-chain-planner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04d233f8a8aea9243490197311b90d7313bce41848541de6447f1c8538b4448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31284

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description A NULL pointer dereference issue was discovered in the nav2 navfn planner component. This issue affects the navigation2 package in ROS2. Recommendations For...

PT-2024-31285

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description A NULL pointer dereference was discovered in the nav2 smac planner component of the affected software. This issue can be exploited via the nav2 smac planner...

Nav2 security vulnerabilities

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the component nav2navfnplanner containing a null pointer dereference...

Nav2 security vulnerabilities

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the inclusion of a null pointer dereference via the component nav2smacplanner...

CVE-2024-37862

Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2planner process...

Nav2 security vulnerabilities

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the inclusion of a buffer overflow vulnerability. A local attacker exploiting this vulnerability could execute arbitrary code to the nav2planner process via a crafted .yam...

PT-2024-27793 · Open Robotics · Ros2

Name of the Vulnerable Software and Affected Versions: Open Robotic Robotic Operating System 2 ROS2 versions navigation2-humble Description: A Buffer Overflow issue allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2 planner process. This enables the attacker to...