Lucene search
+L

147 matches found

OSV
OSV
added 2025/12/19 8:15 a.m.8 views

CVE-2025-66502

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

5.4CVSS5.6AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/19 8:15 a.m.11 views

CVE-2025-66502

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

6.3CVSS0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/19 7:25 a.m.10 views

EUVD-2025-204458

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

6.3CVSS5AI score0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/19 7:25 a.m.28 views

CVE-2025-66502

CVE-2025-66502 describes a stored cross-site scripting (XSS) vulnerability in Foxit’s pdfonline.foxit.com Page Templates. A crafted payload can be stored as the template name and later rendered into the DOM without proper sanitization, causing the injected script to execute each time the affected...

6.3CVSS5.2AI score0.00175EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.17 views

PT-2025-52430

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

6.3CVSS5.5AI score0.00175EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-2659

Malware in sbrugna...

6.1CVSS6.1AI score0.02929EPSS
SaveExploits2References10
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2021-28866

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00493EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-7715

Malicious code in bioql PyPI...

5.4CVSS5.4AI score0.00739EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-3409

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.03124EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/09/17 11:31 p.m.6 views

SUSE CVE-2022-50239

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel oops because of a write in some read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...

7CVSS6.5AI score0.00159EPSS
SaveExploits0References8
OSV
OSV
added 2025/09/15 2:15 p.m.54 views

DEBIAN-CVE-2022-50239

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel oops because of a write in some read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...

7.1CVSS5.7AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/15 2:01 p.m.37 views

CVE-2022-50239 cpufreq: qcom: fix writes in read-only memory region

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel oops because of a write in some read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...

0.00159EPSS
SaveExploits0References4
CVE
CVE
added 2025/09/15 2:01 p.m.40 views

CVE-2022-50239

CVE-2022-50239 refers to a Linux kernel issue in the cpufreq: qcom driver where a string literal stored in read-only memory was used as a destination for snprintf, causing an oops by writing into RO memory. The root cause was using a char *pvs_name pointing to a RO string and attempting snprintf(...

7.1CVSS6.1AI score0.00159EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.8 views

PT-2025-37493

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to writing to a read-only memory region within the cpufreq subsystem, specifically in Qualcomm qcom drivers. This issue causes a kernel oops du...

6.3AI score0.00159EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2017-14720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name. CVE-2017-14720 Note that Nessus...

6.1CVSS6.9AI score0.02066EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/08/18 10:25 p.m.18 views

LibreNMS allows stored XSS in Alert Template name field

Summary A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS alertdocument.cookie/script and filling the other fields with arbitrary content e.g., test, once the template is saved, the script is executed. This confirms that user input is stored and later rendered without proper outp...

5.5CVSS5AI score0.11889EPSS
SaveExploits1References4Affected Software1
Snyk
Snyk
added 2025/08/18 5:45 p.m.16 views

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Alert Template name field. An attacker can execute arbitrary JavaScript in the conte...

5.5CVSS5.5AI score0.11889EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/08/18 5:27 p.m.25 views

CVE-2025-55296 LibreNMS allows stored XSS in Alert Template name field

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS = 25.6.0 in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template...

5.5CVSS0.11889EPSS
SaveExploits1References2
CVE
CVE
added 2025/08/18 5:27 p.m.36 views

CVE-2025-55296

LibreNMS (LibreNMS) has a stored XSS in the Alert Template name field affecting versions up to and including 25.6.0. The vulnerability requires an admin to inject JavaScript that executes when the template renders, potentially compromising other admin accounts. Remediation is to upgrade to versio...

5.5CVSS5.2AI score0.11889EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/18 5:27 p.m.5 views

CVE-2025-55296 LibreNMS allows stored XSS in Alert Template name field

librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting XSS vulnerability exists in LibreNMS = 25.6.0 in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template...

5.5CVSS5.6AI score0.11889EPSS
SaveExploits1References2
Rows per page
Query Builder