Lucene search
K

2406 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.3 views

CVE-2025-49043

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

7.1CVSS5.6AI score0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.2 views

CVE-2025-49043 WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

7.1CVSS5.9AI score0.00064EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.6 views

CVE-2025-49043

CVE-2025-49043: WordPress plugin Magic Responsive Slider and Carousel (magic_carousel) is affected by Reflected XSS due to improper input neutralization during page generation. Affected: Magic Responsive Slider and Carousel WordPress plugin

7.1CVSS5.6AI score0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.18 views

CVE-2025-49043 WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

7.1CVSS0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.4 views

PT-2026-3967

Name of the Vulnerable Software and Affected Versions Magic Responsive Slider and Carousel WordPress versions prior to 1.6 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means a...

5.5AI score0.00064EPSS
Exploits0References3
CVE
CVE
added 2026/01/19 11:32 p.m.13 views

CVE-2026-1194

The CVE-2026-1194 entry concerns MineAdmin 1.x/2.x, specifically a vulnerability in the Swagger component that leads to information disclosure. The issue is remotely exploitable and has a publicly released exploit; attacker may access sensitive information via the Swagger function. Affected produ...

7.5CVSS5.1AI score0.00068EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/18 5:32 a.m.3 views

CVE-2026-1111

A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. T...

7.2CVSS5.1AI score0.00198EPSS
Exploits2References4Affected Software1
CVE
CVE
added 2026/01/18 4:32 a.m.12 views

CVE-2026-1110

CVE-2026-1110 affects cijliu librtsp (up to 2ec1a81ad65280568a0c7c16420d7c10fde13b04). The flaw is in the rtsp_parse_method function, where manipulation leads to a buffer overflow. The vulnerability can be triggered on the local host. Public details do not provide affected version ranges or updat...

7.8CVSS6.3AI score0.00027EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/15 6:21 a.m.9 views

CVE-2026-0635

The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'respaccordionsildersaveimages' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with...

4.3CVSS5.1AI score0.00011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 6:22 p.m.2 views

CVE-2025-37166

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to...

7.5CVSS6.8AI score0.00028EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/14 5:28 a.m.21 views

CVE-2026-0635 Responsive Accordion Slider <= 1.2.2 - Missing Authorization to Authenticated (Contributor+) Slider Update via 'resp_accordion_silder_save_images'

The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'respaccordionsildersaveimages' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with...

4.3CVSS0.00011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/14 5:28 a.m.1 views

CVE-2026-0635 Responsive Accordion Slider <= 1.2.2 - Missing Authorization to Authenticated (Contributor+) Slider Update via 'resp_accordion_silder_save_images'

The Responsive Accordion Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'respaccordionsildersaveimages' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00011EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.1 views

WordPress plugin Responsive Accordion Slider 安全漏洞

WordPress Responsive Accordion Slider plugin is a WordPress plugin that combines the functionality of folding panels Accordion and rotating images Slider. The WordPress Responsive Accordion Slider plugin suffers from an unauthorized data modification vulnerability that stems from a lack of...

4.3CVSS5.8AI score0.00011EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/13 10:17 p.m.3 views

WordPress Responsive Accordion Slider plugin <= 1.2.2 - Missing Authorization to Authenticated (Contributor+) Slider Update via 'resp_accordion_silder_save_images' vulnerability

Missing Authorization to Authenticated Contributor+ Slider Update via 'respaccordionsildersaveimages' vulnerability discovered by Kazuma Matsumoto - GMO Cybersecurity by IERAE, Inc. in WordPress Plugin Responsive Accordion Slider versions = 1.2.2...

4.3CVSS7AI score0.00011EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/13 5:42 p.m.21 views

CVE-2025-37166 Unexpected shutdown in HPE Instant On Access Points after processing specific packets

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to...

7.5CVSS0.00028EPSS
Exploits0References1
CVE
CVE
added 2026/01/13 5:42 p.m.7 views

CVE-2025-37166

Technical details (affected models/versions, root cause, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

7.5CVSS6.5AI score0.00028EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 5:42 p.m.2 views

CVE-2025-37166 Unexpected shutdown in HPE Instant On Access Points after processing specific packets

A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-responsive state, in some cases requiring a hard reset to re-establish services. A malicious actor could leverage this vulnerability to...

7.5CVSS6.5AI score0.00028EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/12 2:8 p.m.4 views

WordPress Responsive Addons for Elementor plugin <= 2.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin Responsive Addons for Elementor versions = 2.0.8...

6.5CVSS7AI score0.00035EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/10 5:40 a.m.3 views

CVE-2026-22486

Missing Authorization vulnerability in Re Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Re Gallery: from n/a through 1.18.9...

5.3CVSS5.1AI score0.00011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:31 p.m.4 views

CVE-2023-4810

The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00111EPSS
Exploits2References1
Rows per page
Query Builder