Lucene search
K

392 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/09 8:55 a.m.3 views

Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54 The package @tableaucatalog-messages/databaselower was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/09 8:55 a.m.1 views

MAL-2026-2866 Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54 The package @tableaucatalog-messages/databaselower was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.4 views

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/10/22 9:15 a.m.1 views

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00032EPSS
Exploits0References3
CVE
CVE
added 2025/10/22 8:27 a.m.7 views

CVE-2025-11817

CVE-2025-11817 affects the WordPress plugin Simple Tableau Viz (versions ≤ 2.0). The root cause is insufficient input sanitization and output escaping on the tableau shortcode, enabling stored cross-site scripting. The issue is exploitable by authenticated users with contributor-level access or h...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/22 8:27 a.m.5 views

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00032EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/22 8:27 a.m.1 views

EUVD-2025-35328

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/22 8:27 a.m.3 views

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/22 12:3 a.m.7 views

WordPress Simple Tableau Viz plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Simple Tableau Viz versions = 2.0...

6.4CVSS5.7AI score0.00032EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.1 views

WordPress plugin Simple Tableau Viz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.4CVSS5.9AI score0.00032EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-28080

Malware in sbrugna...

7.5CVSS7.5AI score0.00316EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-1285

Malware in sbrugna...

7.5CVSS6.2AI score0.02325EPSS
Exploits5References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-28081

Malware in sbrugna...

10CVSS9.2AI score0.01355EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-15892

Malware in sbrugna...

5.5CVSS5.5AI score0.0005EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-14287

Malware in sbrugna...

10CVSS9.5AI score0.01888EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-22740

Malicious code in bioql PyPI...

8.1CVSS6.4AI score0.00199EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25748

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00094EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-27276

Malicious code in bioql PyPI...

7.2CVSS6.9AI score0.00606EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-27277

Malicious code in bioql PyPI...

9.8CVSS9AI score0.03295EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-22744

Malicious code in bioql PyPI...

8.2CVSS6.7AI score0.0015EPSS
Exploits0References1
Rows per page
Query Builder