Lucene search
K

4643 matches found

NVD
NVD
added 2025/03/11 9:15 p.m.3 views

CVE-2025-28892

Cross-Site Request Forgery CSRF vulnerability in a2rocklobster FTP Sync ftp-sync allows Stored XSS.This issue affects FTP Sync: from n/a through = 1.1.6...

7.1CVSS0.00139EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 9:0 p.m.3 views

CVE-2025-28892 WordPress FTP Sync plugin <= 1.1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a2rocklobster FTP Sync ftp-sync allows Stored XSS.This issue affects FTP Sync: from n/a through = 1.1.6...

7.1CVSS7.2AI score0.00139EPSS
Exploits0References1
CVE
CVE
added 2025/03/11 9:0 p.m.47 views

CVE-2025-28892

CVE-2025-28892 concerns the WordPress plugin FTP Sync (themes/plugins: FTP Sync – Theme, Media & Plugin Files) with a CSRF to Stored XSS vulnerability in versions up to 1.1.6. The entry states the flaw enables a stored cross‑site scripting via CSRF, affecting the plugin, and lists a CVSSv3.1 base...

7.1CVSS7.2AI score0.00139EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/11 9:0 p.m.14 views

CVE-2025-28892 WordPress FTP Sync plugin <= 1.1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a2rocklobster FTP Sync ftp-sync allows Stored XSS.This issue affects FTP Sync: from n/a through = 1.1.6...

7.1CVSS0.00139EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.1 views

WordPress plugin FTP Sync 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

7.1CVSS8.4AI score0.00139EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2025/03/10 12:40 p.m.2 views

xorg: xwayland: Use-after-free in SyncInitTrigger()

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

7.8CVSS5.7AI score0.0035EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/03/09 4:33 p.m.15 views

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

6.3CVSS7.4AI score0.00483EPSS
Exploits0References1
NVD
NVD
added 2025/03/07 5:15 p.m.18 views

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

9.1CVSS0.00483EPSS
Exploits0References1
OSV
OSV
added 2025/03/07 5:15 p.m.2 views

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

9.1CVSS6AI score0.00483EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/07 4:13 p.m.4 views

CVE-2024-53695 HBS 3 Hybrid Backup Sync

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

6.3CVSS7.7AI score0.00483EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/07 4:13 p.m.16 views

CVE-2024-53695 HBS 3 Hybrid Backup Sync

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

6.3CVSS0.00483EPSS
Exploits0References1
Amazon
Amazon
added 2025/03/06 12:0 a.m.8 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash CVE-2023-53037 In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mrgetalltgtinfo CVE-2023-53320 In the Lin...

8.4CVSS6.3AI score0.00398EPSS
Exploits4
RedhatCVE
RedhatCVE
added 2025/03/05 3:34 p.m.5 views

CVE-2025-25119

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alejandro Aranda Woocommerce osCommerce Sync woo-oscommerce-sync allows Reflected XSS.This issue affects Woocommerce osCommerce Sync: from n/a through = 2.0.20...

7.1CVSS7.2AI score0.00276EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-26756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: Don't register syncthread for reshape directly Currently, if reshape is interrupted, then reassemble the array will register syncthread directly from...

5.5CVSS5.9AI score0.00209EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-26758

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md: Don't ignore suspended array in mdcheckrecovery mddevsuspend never stop syncthread, hence it doesn't make sense to ignore suspended array in mdcheckrecover...

5.5CVSS6.7AI score0.00212EPSS
Exploits0References4
NVD
NVD
added 2025/03/03 2:15 p.m.8 views

CVE-2025-25119

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alejandro Aranda Woocommerce osCommerce Sync woo-oscommerce-sync allows Reflected XSS.This issue affects Woocommerce osCommerce Sync: from n/a through = 2.0.20...

7.1CVSS0.00276EPSS
Exploits0References1
OSV
OSV
added 2025/03/03 1:31 p.m.2 views

MAL-2025-1880 Malicious code in linkedin-sync (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:31 p.m.3 views

Malicious code in linkedin-sync (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.16 views

CVE-2025-25119 WordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Woocommerce osCommerce Sync allows Reflected XSS. This issue affects Woocommerce osCommerce Sync: from n/a through 2.0.20...

7.1CVSS7AI score0.00276EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.51 views

CVE-2025-25119

CVE-2025-25119 is a Cross-Site Scripting vulnerability in the WordPress plugin WooCommerce osCommerce Sync (NotFound)

7.1CVSS7.2AI score0.00276EPSS
Exploits0References1
Rows per page
Query Builder