1166 matches found
CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI
Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...
CVE-2024-6880 CSRF in MegaBIP
During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt...
Lower than expected performance with AMD CPUs and DOD
Lower than expected performance when using AMD CPUs on the VDA and Citrix Display Only Driver DOD which could result in perceived lag. The lag might be more noticeable with multiple monitors and is only observed with AMD CPUs. These symptoms might be observed with CVAD versions prior to 2212 or...
WordPress plugin Easy Form Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-4521 · Unknown · Siot 아임포트 결제버튼 생성 플러그인
Name of the Vulnerable Software and Affected Versions: SIOT 아임포트 결제버튼 생성 플러그인 versions 1.1.19 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject...
PT-2025-1450 · Storeapps · Putler Connector For Woocommerce
Name of the Vulnerable Software and Affected Versions: Putler Connector for WooCommerce versions n/a through 2.12.0 Description: A Missing Authorization issue is present in the Putler / Storeapps Putler Connector for WooCommerce. This issue allows for unauthorized access. Recommendations: For...
MaxKB 安全漏洞
MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A security vulnerability exists in MaxKB versions prior to 1.9.0, which stems from a remote command execution in the function library module that allows a privileged us...
PT-2025-1480 · Unknown · Schema App Structured Data
Name of the Vulnerable Software and Affected Versions: Schema App Structured Data versions 1.23.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Schema App Structured Data, which allows exploiting incorrectly configured access control security levels...
PT-2025-37930
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...
PT-2024-36656 · Unknown · Contact Form
Name of the Vulnerable Software and Affected Versions: Contact Form, Survey & Form Builder – MightyForms versions 1.3.9 and earlier Description: A Missing Authorization vulnerability is present in Contact Form, Survey & Form Builder – MightyForms, allowing the exploitation of incorrectly configur...
PT-2024-36294 · Unknown +1 · Syntaxhighlighter +1
Name of the Vulnerable Software and Affected Versions: CK and SyntaxHighlighter versions n/a through 3.4.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a w...
CVE-2024-50264 affecting package kernel for versions less than 5.15.173.1-1
CVE-2024-50264 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...
PT-2024-13489 · Miniorange · Miniorange Otp Verification
Name of the Vulnerable Software and Affected Versions: miniorange otp verification versions n/a through 4.2.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels. Recommendations: For...
PT-2024-13526 · Unknown · Wpforo Forum
Name of the Vulnerable Software and Affected Versions: wpForo Forum versions prior to 2.2.5 Description: The issue is related to an improper neutralization of script-related HTML tags in a web page, which allows code injection. This is a type of Basic XSS vulnerability. Recommendations: For...
[SECURITY] Fedora 40 Update: uv-0.5.5-2.fc40
An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3. A patched version of the package is available...
AZL-53977 CVE-2024-53257 affecting package vitess for versions less than 17.0.7-7
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
PT-2024-35872 · WordPress · P. Roy Wp Revisions Manager
Name of the Vulnerable Software and Affected Versions: P. Roy WP Revisions Manager versions 1.0.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF problem, which allows for Cross-Site Request Forgery. This means an attacker can trick a user into performing...