Lucene search
+L

2724 matches found

Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.6 views

CVE-2025-23863 WordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabaoh Rollover Tab rollover-tab allows Stored XSS.This issue affects Rollover Tab: from n/a through = 1.3.2...

6.5CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.6 views

WordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Rollover Tab versions = 1.3.2...

6.5CVSS5.8AI score0.00363EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/01/16 6:41 p.m.5 views

WordPress Tab My Content plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Tab My Content versions = 1.0.0...

7.1CVSS6.1AI score0.00385EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.6 views

WordPress plugin Rollover Tab 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.5CVSS7.7AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.15 views

PT-2025-5149 · Unknown · Rollover Tab

Name of the Vulnerable Software and Affected Versions: Rollover Tab versions 1.3.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject malicious scripts into t...

6.5CVSS8.9AI score0.00363EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.9 views

The vulnerability of Lenovo Tab K10 tablet’s microprogramming software, related to errors in the authentication process for certificates, allows unauthorized access to protected information.

The vulnerability of Lenovo Tab K10 tablet’s microprogramming software is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by using a specially created application...

2.8CVSS5.5AI score0.00135EPSS
SaveExploits0References2Affected Software6
OSV
OSV
added 2025/01/13 12:0 a.m.25 views

UBUNTU-CVE-2025-23108

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability affects Firefox for iOS 134...

4.3CVSS5.8AI score0.00241EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/11 4:15 a.m.14 views

CVE-2025-23108

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability affects Firefox for iOS 134...

4.3CVSS5.8AI score0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/11 3:36 a.m.6 views

CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI

Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...

5.8AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.6 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 134, which originates when a JavaScript link is opened in a new tab via a long press, which could lead to malicious scripts spoofing...

4.3CVSS6AI score0.00241EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.6 views

WordPress plugin WpRently 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

6.1CVSS7.7AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/11 12:0 a.m.8 views

PT-2025-1836 · WordPress · Wprently

Name of the Vulnerable Software and Affected Versions: WpRently versions up to, and including, 2.2.1 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS6.3AI score0.00355EPSS
SaveExploits0References7
NVD
NVD
added 2025/01/05 6:15 a.m.28 views

CVE-2025-0219

A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...

5.1CVSS0.00309EPSS
SaveExploits0References3
CVE
CVE
added 2025/01/05 5:31 a.m.69 views

CVE-2025-0219

CVE-2025-0219 affects Trimble SPS851, version 488.01, specifically the Receiver Status Identity Tab. The vulnerability arises from improper handling of the System Name parameter, allowing cross-site scripting (XSS). The issue is exploitable remotely, and the public disclosure has occurred per the...

5.1CVSS3.4AI score0.00309EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/01/05 5:31 a.m.38 views

CVE-2025-0219 Trimble SPS851 Receiver Status Identity Tab cross site scripting

A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...

5.1CVSS0.00309EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/05 12:0 a.m.5 views

PT-2025-3789 · Trimble · Trimble Sps851

Name of the Vulnerable Software and Affected Versions: Trimble SPS851 version 488.01 Description: A problematic issue has been found in the Receiver Status Identity Tab component of the software, affecting some unknown functionality. The manipulation of the System Name argument leads to cross-sit...

5.1CVSS6.5AI score0.00309EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/12/14 12:0 a.m.6 views

WordPress plugin Tabs Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.8AI score0.00287EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/12/09 9:29 a.m.4 views

firefox: thunderbird: Select list elements could be shown over another site

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks...

4.3CVSS7.2AI score0.00473EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2024/12/09 9:29 a.m.5 views

firefox: thunderbird: Select list elements could be shown over another site

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks...

4.3CVSS7.2AI score0.00473EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2024/12/09 6:31 a.m.6 views

WordPress Simple Side Tab plugin < 2.2.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Simple Side Tab versions 2.2.0...

4.8CVSS6.1AI score0.00342EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder