Lucene search
+L

13694 matches found

CVE
CVE
added 2025/02/05 12:00 a.m.133 views

CVE-2024-57080

CVE-2024-57080 describes a prototype pollution vulnerability in the vxe-table package (version 4.8.10) affecting the lib.install function. The root cause is unsafe handling in lib.install that allows overriding Object.prototype via crafted payloads, leading to potential DoS (per the advisory) and...

7.5CVSS6.4AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/05 12:00 a.m.40 views

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.00435EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:55 p.m.10 views

CVE-2024-13472

The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it...

7.3CVSS6.1AI score0.00561EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/04 8:15 a.m.11 views

CVE-2025-20887

Out-of-bounds read in accessing table used for svp8t in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

5.5CVSS5.9AI score0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/04 12:00 a.m.10 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2025 Release 1, which stems from an out-of-bounds read issue contained in the table f...

5.5CVSS6.4AI score0.00139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:00 a.m.13 views

PT-2025-4169 · Unknown · Libsthmbc.So

Name of the Vulnerable Software and Affected Versions: libsthmbc.so prior to SMR Jan-2025 Release 1 Description: The issue is an out-of-bounds read in accessing a table used for svp8t. This allows local attackers to read arbitrary memory. User interaction is required for triggering this issue...

5.5CVSS7AI score0.00139EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/02/03 8:26 p.m.7 views

WordPress Product Table For WooCommerce Plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim Patchstack Alliance in WordPress Plugin Product Table For WooCommerce versions = 1.2.3...

6.5CVSS6.1AI score0.00192EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/02/03 3:26 p.m.5 views

WordPress CM Table Of Contents plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin CM Table Of Contents – WordPress TOC Plugin versions = 1.2.1...

7.1CVSS6.1AI score0.00378EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2025/02/01 7:15 a.m.9 views

CVE-2024-11829

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table Widget's searchablelabel parameter in all versions up to, and including, 6.1.8 due to insufficient input sanitizati...

5.4CVSS5.9AI score0.00406EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/02/01 3:47 a.m.6 views

SUSE CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

5.8CVSS7.7AI score0.00212EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2025/02/01 12:00 a.m.9 views

WordPress plugin The Plus Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS8.3AI score0.00406EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/31 12:15 p.m.2 views

DEBIAN-CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

7.8CVSS5.6AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 12:15 p.m.11 views

UBUNTU-CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

7.8CVSS6.5AI score0.00212EPSS
SaveExploits0References7
CVE
CVE
added 2025/01/31 11:25 a.m.153 views

CVE-2025-21671

CVE-2025-21671 : In the Linux kernel’s zram subsystem, a path exists where, if zram_meta_alloc fails, the code frees the allocated zram-&gt;table without setting it to NULL. This can cause zram_meta_free to access the (now freed) table, i.e., a potential use-after-free on zram table if a device i...

7.8CVSS7.2AI score0.00212EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/31 11:25 a.m.11 views

CVE-2025-21671 zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

7.4AI score0.00212EPSS
SaveExploits0References4
OSV
OSV
added 2025/01/31 10:15 a.m.12 views

CVE-2024-13472

The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it...

7.3CVSS6.1AI score0.00561EPSS
SaveExploits0References4
CVE
CVE
added 2025/01/31 9:21 a.m.67 views

CVE-2024-13472

CVE-2024-13472 affects the WordPress plugin “WooCommerce Product Table Lite” (versions up to and including 3.9.4). The issue allows unauthenticated attackers to achieve arbitrary shortcode execution due to improper validation before running do_shortcode, and the same sc_attrs parameter is vulnera...

7.3CVSS6.9AI score0.00561EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2025/01/31 12:00 a.m.9 views

WordPress plugin The WooCommerce Product Table Lite 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in the WordPress...

7.3CVSS9.3AI score0.00561EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/31 12:00 a.m.11 views

PT-2025-2187 · WordPress · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite plugin for WordPress versions up to, and including, 3.9.4 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software not properly validating a value before runnin...

7.3CVSS9.5AI score0.00561EPSS
SaveExploits0References10
Patchstack
Patchstack
added 2025/01/30 11:31 p.m.8 views

WordPress WooCommerce Product Table Lite plugin <= 3.9.4 - Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting vulnerability

Unauthenticated Arbitrary Shortcode Execution & Reflected Cross-Site Scripting vulnerability discovered by mikemyers in WordPress Plugin WooCommerce Product Table Lite versions = 3.9.4...

7.3CVSS6.4AI score0.00561EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder