Lucene search
K

393 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/09 8:55 a.m.7 views

Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54 The package @tableaucatalog-messages/databaselower was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
OSV
OSV
added 2026/04/09 8:55 a.m.6 views

MAL-2026-2866 Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4155e0aa6cc429c2ea66b3b131055983379b13cab66b74fa3c1758e83a48ec54 The package @tableaucatalog-messages/databaselower was found to contain malicious code. Source: ossf-package-analysis...

5.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.9 views

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5AI score0.00211EPSS
Exploits0References1
NVD
NVD
added 2025/10/22 9:15 a.m.4 views

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00211EPSS
Exploits0References3
CVE
CVE
added 2025/10/22 8:27 a.m.12 views

CVE-2025-11817

CVE-2025-11817 affects the WordPress plugin Simple Tableau Viz (versions ≤ 2.0). The root cause is insufficient input sanitization and output escaping on the tableau shortcode, enabling stored cross-site scripting. The issue is exploitable by authenticated users with contributor-level access or h...

6.4CVSS4.7AI score0.00211EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/22 8:27 a.m.4 views

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00211EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/22 8:27 a.m.2 views

EUVD-2025-35328

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00211EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/10/22 8:27 a.m.6 views

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00211EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/22 12:3 a.m.8 views

WordPress Simple Tableau Viz plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Simple Tableau Viz versions = 2.0...

6.4CVSS5.7AI score0.00211EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin Simple Tableau Viz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.4CVSS5.9AI score0.00211EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-28080

Malware in sbrugna...

7.5CVSS7.5AI score0.01223EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-15892

Malware in sbrugna...

5.5CVSS5.5AI score0.00201EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-14287

Malware in sbrugna...

10CVSS9.5AI score0.13632EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-28081

Malware in sbrugna...

10CVSS9.2AI score0.01804EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-1285

Malware in sbrugna...

7.5CVSS6.2AI score0.04301EPSS
Exploits5References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2021-7096

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.01338EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4200

Malicious code in bioql PyPI...

7.7CVSS6.4AI score0.00527EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-4201

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00311EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-27277

Malicious code in bioql PyPI...

9.8CVSS9AI score0.0134EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-25747

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00254EPSS
Exploits0References1
Rows per page
Query Builder