Lucene search
+L

3531 matches found

NVD
NVD
•added 2026/01/08 10:15 a.m.•17 views

CVE-2025-68874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

7.1CVSS0.00178EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/08 9:17 a.m.•29 views

CVE-2025-68874

CVE-2025-68874 is a real, publicly listed vulnerability affecting the WordPress plugin “Visitor Stats Widget.” The connected document confirms: an unauthenticated, reflected cross-site scripting (XSS) flaw due to improper neutralization of input during web page generation in the Visitor Stats Wid...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/08 9:17 a.m.•6 views

CVE-2025-68874 WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

5.8AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/08 9:17 a.m.•47 views

CVE-2025-68874 WordPress Visitor Stats Widget plugin <= 1.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

7.1CVSS0.00178EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•3 views

CVE-2025-68874: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shahjada Visitor Stats Widget visitor-stats-widget allows Reflected XSS.This issue affects Visitor Stats Widget: from n/a through = 1.5.0...

7.1CVSS5.8AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•11 views

WordPress plugin Visitor Stats Widget 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.9AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•13 views

PT-2026-1924

Name of the Vulnerable Software and Affected Versions Shahjada Visitor Stats Widget versions through 1.5.0 Description The Shahjada Visitor Stats Widget software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-site Scripting XSS conditio...

7.1CVSS5.9AI score0.00178EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/07 9:43 a.m.•8 views

OPENSUSE-SU-2026:20003-1 Security update of valkey

This update for valkey fixes the following issues: Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution bsc1250995 - CVE-2025-46817: Fixed that a Lua script may lead to integer overflow and potential RCE bsc1250995 - CVE-2025-46818: Fixed...

9.9CVSS7.6AI score0.82294EPSS
SaveExploits15References5
RedhatCVE
RedhatCVE
•added 2026/01/07 9:12 a.m.•19 views

CVE-2024-2028

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Covid-19 Stats Widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.8AI score0.00449EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000436)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000436 advisory. A memory leak in the bfadimgetstats function in drivers/scsi/bfa/bfadattr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

4.7CVSS6.2AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•11 views

PT-2026-26122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a shared memory region for statistics reporting between the driver and the Network Interface Card NIC is susceptible to corruption. The NIC...

7.8CVSS6.4AI score0.0012EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/12/31 12:26 a.m.•15 views

SUSE CVE-2023-54276

In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu replycachestats counters back to nfsdinitnet Commit f5f9d4a314da "nfsd: move reply cache initialization into nfsd startup" moved the initialization of the reply cache into nfsd startup, but didn't accoun...

5.5CVSS5.6AI score0.00199EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993225 advisory. In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate allocpercpu failure Check allocprecpu's return value and return...

5.5CVSS5.9AI score0.00202EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•24 views

WordPress WP Online Users Stats plugin <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter vulnerability

Authenticated Editor+ SQL Injection via tablename Parameter vulnerability discovered by rajanhoyr in WordPress Plugin WP Online Users Stats versions = 1.0.0...

4.9CVSS5.9AI score0.00374EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2023-54276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: move init of percpu replycachestats counters back to nfsdinitnet Commit f5f9d4a314da nfsd: move reply cache initialization into nfsd startup moved the...

5.6AI score0.00199EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/30 3:30 p.m.•11 views

EUVD-2023-60528

In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu replycachestats counters back to nfsdinitnet Commit f5f9d4a314da "nfsd: move reply cache initialization into nfsd startup" moved the initialization of the reply cache into nfsd startup, but didn't accoun...

5.6AI score0.00199EPSS
SaveExploits0References6
NVD
NVD
•added 2025/12/30 1:16 p.m.•13 views

CVE-2023-54276

In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu replycachestats counters back to nfsdinitnet Commit f5f9d4a314da "nfsd: move reply cache initialization into nfsd startup" moved the initialization of the reply cache into nfsd startup, but didn't accoun...

0.00199EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/30 1:16 p.m.•17 views

CVE-2022-50877

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NU...

0.00197EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2025/12/30 1:16 p.m.•9 views

CVE-2023-54276

In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu replycachestats counters back to nfsdinitnet Commit f5f9d4a314da "nfsd: move reply cache initialization into nfsd startup" moved the initialization of the reply cache into nfsd startup, but didn't accoun...

5.6AI score0.00199EPSS
SaveExploits0References7
OSV
OSV
•added 2025/12/30 12:23 p.m.•13 views

CVE-2023-54302 RDMA/irdma: Fix data race on CQP completion stats

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP completion stats CQP completion statistics is read lockesly in irdmawaitevent and irdmacheckcqpprogress while it can be updated in the completion thread irdmascccqgetcqeinfo on another CPU as KCSA...

6.3AI score
SaveExploits0References7
Rows per page
Query Builder