Lucene search
+L

3625 matches found

RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.6 views

CVE-2025-64221

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

7.1CVSS6.4AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.24 views

PT-2025-52616

TRC analysis shows attackers chaining authentication bypass CVE-2025-67039 with OS command injection flaws to gain root access on Lantronix devices. Root compromise enables lateral movement across network infrastructure. Runtime segmentation helps contain post-compromise pivoting in critical...

9.1CVSS5.8AI score0.00311EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.25 views

PT-2025-52608

CVE-2025-67046 - Adobe Flash Unvalidated Redirects CVE ID : CVE-2025-67046 Published : Dec. 19, 2025, 4:15 p.m. | 2 hours, 8 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67037. Reason: This record is a reservation duplicate of CVE-2025-67037. Notes:...

6.8AI score0.00302EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.15 views

PT-2025-52604

Content removed...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/12/18 9:30 a.m.6 views

EUVD-2025-204077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

7.1CVSS5.9AI score0.00214EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.5 views

CVE-2025-64221

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

7.1CVSS0.00214EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.9 views

CVE-2025-58951

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

9.3CVSS0.00341EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.2 views

CVE-2025-64221 WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

7.1CVSS6AI score0.00214EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.14 views

CVE-2025-64221

CVE-2025-64221 pertains to a Reflected XSS in the designthemes Reservation Plugin (dt-reservation-plugin) for WordPress, affecting versions up to 1.6. The underlying issue is improper neutralization of input during web page generation, enabling script injection. This aligns with the CVSS 3.1 base...

7.1CVSS6AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.30 views

CVE-2025-64221 WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

7.1CVSS0.00214EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 7:21 a.m.8 views

EUVD-2025-204145

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

9.3CVSS7.1AI score0.00341EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/18 7:21 a.m.23 views

CVE-2025-58951

The CVE-2025-58951 entry concerns a SQL Injection vulnerability in the WordPress plugin “Advance Seat Reservation Management for WooCommerce” (scw-seat-reservation), affecting versions from n/a through 3.1. Root cause: improper neutralization of special elements used in SQL commands. Impact is de...

9.3CVSS7.2AI score0.00341EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.32 views

CVE-2025-58951 WordPress Advance Seat Reservation Management for WooCommerce plugin <= 3.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

9.3CVSS0.00341EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.4 views

CVE-2025-58951 WordPress Advance Seat Reservation Management for WooCommerce plugin <= 3.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

9.3CVSS7.2AI score0.00341EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.8 views

WordPress plugin designthemes Reservation Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

7.1CVSS6AI score0.00214EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.7 views

PT-2025-52168

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through = 1.6...

6.4AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.7 views

PT-2025-52101

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in smartcms Advance Seat Reservation Management for WooCommerce scw-seat-reservation allows SQL Injection.This issue affects Advance Seat Reservation Management for WooCommerce: from n/a through = 3.1...

7.6AI score0.00341EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.7 views

WordPress plugin Advance Seat Reservation Management for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

9.3CVSS7.7AI score0.00341EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/17 12:24 a.m.9 views

SUSE CVE-2025-68244

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915vmapinww, a synchronous variant of dmafenceworkcommit is called. When pinning a VMA to GGTT address space on a Cherry View family processor, ...

5.5CVSS6.4AI score0.00188EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
added 2025/12/16 8:44 p.m.12 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS7.7AI score0.00438EPSS
SaveExploits1References1
Rows per page
Query Builder