4985 matches found
CVE-2025-30941
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marvie Pons Pinterest Verify Meta Tag pinterest-verify-meta-tag allows Stored XSS.This issue affects Pinterest Verify Meta Tag: from n/a through = 1.3...
CVE-2024-56343
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2024-56342
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...
Improper Certificate Validation
Overview devsecops-engine-tools is a Tool for DevSecOps strategy Affected versions of this package are vulnerable to Improper Certificate Validation via the getaccesstokenclientcredentials function, which uses the requests.request function with verify=False configured. Remediation Upgrade...
CVE-2025-30941
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marvie Pons Pinterest Verify Meta Tag pinterest-verify-meta-tag allows Stored XSS.This issue affects Pinterest Verify Meta Tag: from n/a through = 1.3...
CVE-2025-30941
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marvie Pons Pinterest Verify Meta Tag pinterest-verify-meta-tag allows Stored XSS.This issue affects Pinterest Verify Meta Tag: from n/a through = 1.3...
CVE-2025-30941
CVE-2025-30941 : Stored XSS in the Pinterest Verify Meta Tag plugin for WordPress due to improper input neutralization during web page generation. Affected versions: from n/a through 1.3 (and possibly earlier). Root cause is not fully elaborated in the provided documents; the vulnerability could ...
CVE-2024-56342
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...
CVE-2024-56343
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2024-56343
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2024-56343 IBM Verify Identity Access Digital Credentials denial of service
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2024-56343
CVE-2024-56343 affects IBM Verify Identity Access Digital Credentials 24.06. An authenticated user can crash the service by sending a specially crafted POST request, causing a denial-of-service (A: HIGH/availability impact as per IBM/NVD). The issue is documented across multiple feeds (IBM bullet...
CVE-2024-56343 IBM Verify Identity Access Digital Credentials denial of service
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2024-56342 IBM Verify Identity Access Digital Credentials information disclosure
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-56342 IBM Verify Identity Access Digital Credentials information disclosure
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2024-56342
CVE-2024-56342 affects IBM Verify Identity Access Digital Credentials 24.06. Affected component: the product’s detailed technical error messages leak sensitive information to remote attackers, enabling information disclosure. Impact is limited to information exposure (no integrity/availability im...
CVE-2024-22330 IBM Security Verify Governance information disclosure
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...
CVE-2024-22330 IBM Security Verify Governance information disclosure
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...