Lucene search
K

2406 matches found

Cvelist
Cvelist
added 2025/08/28 12:36 p.m.8 views

CVE-2025-48316 WordPress Responsive Mobile-Friendly Tooltip plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ItayXD Responsive Mobile-Friendly Tooltip responsive-mobile-friendly-tooltip allows Stored XSS.This issue affects Responsive Mobile-Friendly Tooltip: from n/a through = 1.6.6...

6.5CVSS0.00047EPSS
Exploits0References1
OSV
OSV
added 2025/08/27 2:15 p.m.2 views

CVE-2025-9528

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

7.2CVSS5.7AI score0.01079EPSS
Exploits1References6
OSV
OSV
added 2025/08/27 1:15 p.m.1 views

CVE-2025-9525

A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may...

8.7CVSS6.4AI score0.00557EPSS
Exploits1References6
NVD
NVD
added 2025/08/27 1:15 p.m.4 views

CVE-2025-9526

A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rmport leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the...

9CVSS0.00756EPSS
Exploits1References6
CVE
CVE
added 2025/08/24 3:2 p.m.22 views

CVE-2025-9392

The CVE-2025-9392 entry concerns Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices. The vulnerability is in the qosClassifier function of /goform/qosClassifier, where improper manipulation of dir, sFromPort, sToPort, dFromPort, dToPort, protocol, layer7, dscp, and remark_dscp arguments le...

9CVSS8.8AI score0.00374EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2025/08/23 7:32 a.m.20 views

CVE-2025-9358

CVE-2025-9358 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 (firmware ranges listed in sources). The root cause is a stack-based buffer overflow in the setSysAdm function located in /goform/setSysAdm, triggered by manipulation of the admpasshint argument. This allows remote ex...

9CVSS8.8AI score0.00559EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2025/08/20 8:2 p.m.21 views

CVE-2025-9246

Concrete details found: A stack-based buffer overflow in Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 firmware, triggered by manipulating the single_port_rule/port_range_rule arguments in /goform/check_port_conflict. Affected versions are 1.0.013.001 through 1.2.07.001. Impact includes remot...

9CVSS8.8AI score0.00392EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.2 views

WordPress plugin Responsive HTML5 Audio Player PRO With Playlist 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.1CVSS6AI score0.00051EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-3204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack work...

7.5CVSS7.1AI score0.00356EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.2 views

CVE-2025-52728

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS5.9AI score0.0039EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/15 12:0 a.m.1 views

WordPress Simple Responsive Slider plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Simple Responsive Slider plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

6.4CVSS6.1AI score0.00163EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in des-responsive-framework (npm)

The package des-responsive-framework was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in responsive-layout (npm)

The package responsive-layout was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @semdash-kit/responsive (npm)

The package @semdash-kit/responsive was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-32151 Malicious code in responsive-layout (npm)

The package responsive-layout was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in sym-responsive (npm)

The package sym-responsive was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-27471 Malicious code in ng2-responsive-lib (npm)

The package ng2-responsive-lib was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-34322 Malicious code in sym-responsive (npm)

The package sym-responsive was found to contain malicious code...

7.2AI score
Exploits0
vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.4 views

my-first-vue-project (=0.1.0), react-responsive-data-table (>=1.0.0 <=1.0.5) potentially affected by unknown CVE via bootstrap4 (=0.0.1-security)

bootstrap4 NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project =0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159...

5.8AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-9318 Malicious code in @semdash-kit/responsive (npm)

The package @semdash-kit/responsive was found to contain malicious code...

7.2AI score
Exploits0
Rows per page
Query Builder