1616 matches found
CVE-2025-6757
CVE-2025-6757 – Recent Posts Widget Extended (WordPress) The vulnerability is in the Recent Posts Widget Extended plugin for WordPress, affecting versions up to and including 2.0.2. It is a Stored Cross-Site Scripting (XSS) flaw in the plugin’s rpwe shortcode caused by insufficient input sanitiza...
Malicious code in congress-lady-short (npm)
The package congress-lady-short was found to contain malicious code...
MAL-2025-43882 Malicious code in congress-lady-short (npm)
The package congress-lady-short was found to contain malicious code...
CVE-2025-58834 WordPress short.io Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gugu short.io wp-shortcm allows DOM-Based XSS.This issue affects short.io: from n/a through = 2.4.2...
crypto: arm64/neonbs - fix out-of-bounds access on short input
...
Ubuntu 14.04 LTS : OpenLDAP vulnerabilities (USN-7713-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7713-1 advisory. It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulti...
USN-7713-1: OpenLDAP vulnerabilities
It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. CVE-2020-36229, CVE-2020-36230 Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A...
USN-7713-1 openldap vulnerabilities
It was discovered that OpenLDAP incorrectly handled X.509 DN parsing. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service. CVE-2020-36229, CVE-2020-36230 Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A...
Linux Distros Unpatched Vulnerability : CVE-2011-4931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpw generates shorter passwords than required CVE-2011-4931 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...
CVE-2025-7957
The CVE-2025-7957 entry concerns the WordPress ShortcodeHub plugin (MultiPurpose Shortcode Builder). It is a Stored Cross-Site Scripting (XSS) vulnerability via the author_link_target parameter in all versions up to 1.7.1, allowing authenticated attackers with Contributor+ privileges to inject sc...
CVE-2025-55420
creationtimestamp| type| source ---|---|--- 2025-08-21 18:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwwlw7fktl2a...
openjpeg: OpenJPEG OOB heap memory write
An out-of-bounds heap memory write OOB flaw was found in OpenJPEG. A call to opjjp2readheader may lead to an OOB heap memory write when the data stream pstream is too short and pimage is not initialized...
WordPress plugin The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin The Paid Membership Plugi...
Malicious code in book-short-grid-benchmark-route (npm)
The package book-short-grid-benchmark-route was found to contain malicious code...
Malicious code in deserialize-object-bash-monitor-short (npm)
The package deserialize-object-bash-monitor-short was found to contain malicious code...
Malicious code in short-decrypt-mock-awk-function (npm)
The package short-decrypt-mock-awk-function was found to contain malicious code...
Malicious code in hash-cloud-short-void-cluster (npm)
The package hash-cloud-short-void-cluster was found to contain malicious code...
MAL-2025-26584 Malicious code in mock-uglify-short-char-catch (npm)
The package mock-uglify-short-char-catch was found to contain malicious code...