426 matches found
CVE-2025-13604
The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including, 2.168 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacker...
CVE-2025-62419 DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...
CVE-2025-62419
DataEase (DataEase platform) prior to v2.10.14 contains a JDBC URL injection in the DB2 data source handler: when extraParams is empty, HOSTNAME, PORT, and DATABASE are concatenated into the JDBC URL without filtering, allowing an attacker to inject a malicious JDBC string via HOSTNAME to bypass ...
EUVD-2010-2162
Malware in sbrugna...
EUVD-2005-4248
Malware in sbrugna...
EUVD-2016-0278
Malware in sbrugna...
EUVD-2008-2713
Malware in sbrugna...
EUVD-2006-1093
Malware in sbrugna...
EUVD-2021-0726
Malware in sbrugna...
EUVD-2004-2088
Malware in sbrugna...
EUVD-2003-1139
Malware in sbrugna...
EUVD-2006-3517
Malware in sbrugna...
EUVD-2021-25854
Malware in sbrugna...
EUVD-2018-13245
Malware in sbrugna...
EUVD-2013-7123
Malware in sbrugna...
EUVD-2016-7341
Malware in sbrugna...
EUVD-2018-18776
Malware in sbrugna...
EUVD-2010-4194
Malware in sbrugna...