14040 matches found
CVE-2024-34579 Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow
Fuji Electric Alpha5 SMART is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...
Fuji Electric Alpha5 SMART 安全漏洞
The Fuji Electric Alpha5 SMART is a high-performance AC servo system designed for high-speed and high-precision control. A stack buffer overflow vulnerability exists in the Fuji Electric Alpha5 SMART. The vulnerability is due to the system failing to perform proper boundary checks on input data...
WordPress WP Smart Tooltip plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP Smart Tooltip versions = 1.0.0...
WordPress Smart Manager Plugin <= 8.52.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Webula Patchstack Alliance in WordPress Plugin Smart Manager versions = 8.52.0...
CVE-2024-12818
The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2024-12818
CVE-2024-12818 refers to a Stored XSS in the WP Smart TV WordPress plugin via the tv-video-player shortcode, affecting all versions up to and including 2.1.8. The vulnerability stems from insufficient input sanitization and output escaping of user-supplied shortcode attributes, allowing an authen...
CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
WordPress plugin WP Smart TV 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress WP Smart TV plugin <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin WP Smart TV versions = 2.1.8...
CVE-2025-21312
Windows Smart Card Reader Information Disclosure Vulnerability...
CVE-2025-21312
Windows Smart Card Reader Information Disclosure Vulnerability...
CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability
...
CVE-2025-21312
CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...
CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability
...
CVE-2025-21607 Success of Certain Precompile Calls not Checked in Vyper
Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall executi...
CVE-2025-21607 Success of Certain Precompile Calls not Checked in Vyper
Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall executi...
