27246 matches found
CVE-2024-14002
creationtimestamp| type| source ---|---|--- 2025-10-30 22:54:12+00:00| seen| Telegram/x772QyFUAUXwJwZgDZiQcLlOfeu8IBItbSsS8vAQSe8DHA...
CVE-2011-10040
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
CVE-2011-10040
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. The issue stems from insufficient validation or escaping of user-supplied input, which may allow an attacker to inject and execute arbitrary script in...
CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
GHSA-29XP-372Q-XQPH
creationtimestamp| type| source ---|---|--- 2025-10-30 18:04:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464435491893188...
GHSA-XGP7-7QJQ-VG47
creationtimestamp| type| source ---|---|--- 2025-10-30 16:54:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464161009772231...
CVE-2023-53007
creationtimestamp| type| source ---|---|--- 2025-10-30 16:53:13+00:00| seen| Telegram/zur7V7RWypfFs53TicNLeM-B-PE8sFz8kVTSZxvnsh9w...
CVE-2025-11632
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2011-10040: Improper Neutralization of Input During Web Page Generation
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
Nagios XI security vulnerabilities
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9, which stems from insufficient...
CVE-2025-9870
creationtimestamp| type| source ---|---|--- 2025-10-29 23:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emnqcu3r2q...
CVE-2025-62402
creationtimestamp| type| source ---|---|--- 2025-10-29 19:33:03+00:00| seen| https://seclists.org/oss-sec/2025/q4/100 2025-10-29 21:09:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4eeape4oa2s 2025-10-30 12:00:40+00:00| seen|...
GHSA-9F58-4465-23C7
creationtimestamp| type| source ---|---|--- 2025-10-29 17:53:53+00:00| seen| Telegram/FcyFOIGp1355bB4pPTj-mLCS9eCskWr8JijI5t03PxSg30o...
CVE-2025-11632
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2025-11632
The WordPress plugin Call Now Button (Call Now Button – The #1 Click to Call Button for WordPress) is affected by CVE-2025-11632 due to missing capability checks in multiple functions across versions up to 1.5.4. The issue enables authenticated users with Subscriber-level access and above to gene...
CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...