Lucene search
+L

2325 matches found

Github Security Blog
Github Security Blog
•added 2025/11/18 6:32 p.m.•18 views

Drupal Simple multi step form allows Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

3.5CVSS5.9AI score0.00173EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2025/11/18 5:15 p.m.•25 views

CVE-2025-12761

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

3.5CVSS0.00173EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/18 4:56 p.m.•24 views

CVE-2025-12761 Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/18 4:56 p.m.•8 views

CVE-2025-12761 Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

5.9AI score0.00173EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/18 4:56 p.m.•15 views

CVE-2025-12761 Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

3.5CVSS5.9AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•3 views

CVE-2025-12761: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Simple multi step form allows Cross-Site Scripting XSS.This issue affects Simple multi step form: from 0.0.0 before 2.0.0...

3.5CVSS5.8AI score0.00173EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•16 views

Drupal Simple multi step form 安全漏洞

Drupal Simple multi step form is a form module for the Drupal community. A security vulnerability exists in Drupal Simple multi step form versions prior to 2.0.0, which stems from improper input neutralization during page generation and could lead to a cross-site scripting attack...

3.5CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•21 views

PT-2025-47343

Name of the Vulnerable Software and Affected Versions Drupal Simple multi step form versions prior to 2.0.0 Description A flaw exists in Drupal Simple multi step form that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

3.5CVSS5.9AI score0.00173EPSS
SaveExploits0References3
hivepro
hivepro
•added 2025/11/14 10:51 p.m.•20 views

6 Actionable Vulnerability Management Best Practices

Every unpatched vulnerability is more than just a technical flaw; it's a direct business risk. These security gaps are the entry points for breaches that lead to devastating financial losses, operational downtime, and long-term damage to your brand's reputation. When viewed through this lens,...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/11/14 12:00 a.m.•59 views

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.6CVSS6.1AI score0.00528EPSS
SaveExploits0References2Affected Software24
RedhatCVE
RedhatCVE
•added 2025/11/12 6:01 p.m.•11 views

CVE-2025-60704

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.5AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/11 6:15 p.m.•10 views

CVE-2025-60704

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/11 6:15 p.m.•10 views

CVE-2025-60704

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS0.00528EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/11/11 5:59 p.m.•11 views

CVE-2025-60704

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.5AI score0.00528EPSS
SaveExploits0References2Affected Software24
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•16 views

kernel: net: phy: mscc: Fix memory leak when using one step timestamping

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the HW is configured to insert the TX time into the frame, so there is ...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2025/11/11 8:00 a.m.•13 views

Windows Kerberos Elevation of Privilege Vulnerability

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS7.4AI score0.00528EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•2 views

CVE-2025-60704: Missing Cryptographic Step

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/05 6:09 p.m.•15 views

DRUPAL-CONTRIB-2025-116

This module provides the ability to convert any entity form into a simple multi-step form. The module doesn’t sufficiently filter certain user-provided text leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...

3.5CVSS5.7AI score0.00173EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/11/05 12:00 a.m.•20 views

Drupal Simple multi step form module < 2.0.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Ide Braakman idebr in WordPress Module Simple multi step form versions 2.0.0...

3.5CVSS6.1AI score0.00173EPSS
SaveExploits0Affected Software1
Drupal
Drupal
•added 2025/11/05 12:00 a.m.•30 views

Simple multi step form - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-116

This module provides the ability to convert any entity form into a simple multi-step form. The module doesn’t sufficiently filter certain user-provided text leading to a cross-site scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the...

3.5CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Rows per page
Query Builder