CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9972 matches found

Positive Technologies•added 2025/10/07 12:00 a.m.•10 views

PT-2025-41154

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.4 Dell PowerProtect Data Domain LTS2024 release versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS 2023 release versions 7.10.1.0 through 7.10.1.60 Description The...

5.3CVSS6.3AI score0.00381EPSS

SaveExploits0References3

RedhatCVE•added 2025/10/06 5:13 p.m.•10 views

CVE-2025-54290

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints...

6.9CVSS6.5AI score0.00337EPSS

SaveExploits1References1

Positive Technologies•added 2025/10/06 12:00 a.m.•14 views

PT-2025-40854

Name of the Vulnerable Software and Affected Versions Responsive Lightbox & Gallery WordPress plugin versions prior to 2.5.3 Description The software does not properly handle HTML tag attribute modifications, which could allow unauthenticated attackers to include event handlers and conduct Stored...

6.3CVSS5.2AI score0.00214EPSS

SaveExploits0References6

RedhatCVE•added 2025/10/05 3:37 a.m.•28 views

CVE-2025-9952

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

6.1CVSS5.6AI score0.00275EPSS

SaveExploits0References1

CVE•added 2025/10/04 3:33 a.m.•40 views

CVE-2025-9886

CVE-2025-9886 : Trinity Audio – Text to Speech AI audio player for WordPress has a Cross-Site Request Forgery vulnerability up to version 5.20.2 caused by missing nonce validation in admin/inc/post-management.php. This allows unauthenticated attackers to activate/deactivate posts via forged reque...

4.3CVSS5AI score0.00197EPSS

SaveExploits0References3

NVD•added 2025/10/04 3:15 a.m.•18 views

CVE-2025-11228

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the registerAssociateFormsWithCampaign function in all versions up to, and including, 4.10.0. This makes it possible for unauthenticat...

5.3CVSS0.00289EPSS

SaveExploits0References3