Lucene search
+L

24858 matches found

Patchstack
Patchstack
•added 2025/08/20 11:22 a.m.•18 views

WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability

Privilege Escalation Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Support Ticket versions = 1.9...

6.5CVSS6.6AI score0.00452EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2025/08/20 9:27 a.m.•21 views

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.8CVSS6.7AI score0.00444EPSS
SaveExploits2References2
NVD
NVD
•added 2025/08/20 8:15 a.m.•36 views

CVE-2025-54056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•34 views

CVE-2025-54027

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through = 3.8.0...

7.1CVSS0.00244EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 8:15 a.m.•41 views

CVE-2025-54031

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Schiocco Support Board supportboard allows PHP Local File Inclusion.This issue affects Support Board: from n/a through = 3.8.0...

8.1CVSS0.00659EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:03 a.m.•38 views

CVE-2025-54027 WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through = 3.8.0...

7.1CVSS0.00244EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:03 a.m.•12 views

CVE-2025-54027 WordPress Support Board <= 3.8.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board allows Reflected XSS. This issue affects Support Board: from n/a through 3.8.0...

7.1CVSS7.2AI score0.00244EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:03 a.m.•37 views

CVE-2025-54027

CVE-2025-54027 is a reflected XSS in WordPress plugin Support Board (Schiocco) affecting versions up to 3.8.0. The issue arises from improper input neutralization during web page generation, enabling cross-site scripting reflections. CVSS base score is 7.1 (HIGH) with network attack vector, user ...

7.1CVSS5.9AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 8:02 a.m.•26 views

CVE-2025-54031 WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Schiocco Support Board supportboard allows PHP Local File Inclusion.This issue affects Support Board: from n/a through = 3.8.0...

8.1CVSS0.00659EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:02 a.m.•5 views

CVE-2025-54031 WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Schiocco Support Board allows PHP Local File Inclusion. This issue affects Support Board: from n/a through 3.8.0...

8.1CVSS7.4AI score0.00659EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:02 a.m.•45 views

CVE-2025-54031

CVE-2025-54031 is a PHP Local File Inclusion in WordPress Support Board, caused by improper control of filename for include/require statements. Affected: Support Board versions through 3.8.0. Impact: PHP LFI leading to access to local files; CVSS metrics indicate HIGH severity. Remediation: a fix...

8.1CVSS5.9AI score0.00659EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/08/20 4:16 a.m.•24 views

Important: Red Hat Security Advisory: pki-deps:10.6 security update

An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

8.7CVSS6.9AI score0.00772EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•20 views

PT-2025-34005 · Unknown · Schiocco Support Board

Name of the Vulnerable Software and Affected Versions: Schiocco Support Board versions through 3.8.0 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: Update Schiocco Support Board to a version later than 3.8.0...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•16 views

WordPress plugin Support Board 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

7.1CVSS5.9AI score0.00244EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•16 views

WordPress plugin Support Board 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

8.1CVSS6.5AI score0.00659EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•19 views

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the ntpServer parameter in the...

6.5CVSS7.3AI score0.00264EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/20 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2019-11757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. This resulted in a...

8.8CVSS7.2AI score0.01385EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•5 views

CVE-2025-54031: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Schiocco Support Board supportboard allows PHP Local File Inclusion.This issue affects Support Board: from n/a through = 3.8.0...

8.1CVSS5.8AI score0.00659EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•3 views

CVE-2025-54027: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Schiocco Support Board supportboard allows Reflected XSS.This issue affects Support Board: from n/a through = 3.8.0...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•3 views

CVE-2025-49424: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themepassion Support Ticket support-ticket allows Reflected XSS.This issue affects Support Ticket: from n/a through = 1.9...

7.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Rows per page
Query Builder