266170 matches found
CVE-2025-5715
creationtimestamp| type| source ---|---|--- 2025-06-06 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2vuxfr22s 2025-06-06 10:10:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635874812023399...
CVE-2025-41428
creationtimestamp| type| source ---|---|--- 2025-06-03 09:27:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsyn3oet2 2025-06-03 12:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdej6pr32m...
CVE-2025-5377
creationtimestamp| type| source ---|---|--- 2025-05-31 13:31:58+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqhu7by7mjc2 2025-05-31 14:06:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhw7ib54t2a...
CVE-2025-48473
creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5v2oah5q2 2025-05-29 17:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdc5ibmwj2w...
CVE-2025-48734
creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:26+00:00| seen| https://seclists.org/oss-sec/2025/q2/175 2025-05-28 13:57:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585806930591300 2025-05-28 15:22:46+00:00| seen|...
CVE-2024-51101
creationtimestamp| type| source ---|---|--- 2025-05-23 17:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu5y5bto72j...
CVE-2025-22584
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through = 1.3...
CVE-2024-43294
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BoldThemes Bold Timeline Lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through 1.2.0...
CVE-2024-32554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Knight Lab Knight Lab Timeline allows Stored XSS.This issue affects Knight Lab Timeline: from n/a through 3.9.3.4...
CVE-2024-3724
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Stack Group, Photo Stack, & Horizontal Timeline widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping on user supplied...
CVE-2024-37919
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pratik Chaskar Timeline Module for Beaver Builder allows Stored XSS.This issue affects Timeline Module for Beaver Builder: from n/a through 1.1.3...
CVE-2024-0977
The Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image URLs in the plugin's timeline widget in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output...
CVE-2024-2287
The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...
CVE-2022-4828
The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2022-34962
OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting XSS vulnerability via the Group Timeline module...
CVE-2021-24553
The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin...
CVE-2021-30290
Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2020-17363
USVN aka User-friendly SVN before 1.0.9 allows remote code execution via shell metacharacters in the numberstart or numberend parameter to LastHundredRequest aka lasthundredrequestAction in the Timeline module. NOTE: this may overlap CVE-2020-25069...