205 matches found
CVE-2024-34078
html-sanitizer is an allowlist-based HTML cleaner. If using keeptypographicwhitespace=False which is the default, the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. The problem has...
CVE-2025-13969
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the reviews-slider shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
EUVD-2025-202987
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the reviews-slider shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2025-13969 Reviews Sorted <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'space' Shortcode Attribute
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the reviews-slider shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
PT-2025-50837
The Reviews Sorted plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'space' parameter of the reviews-slider shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
OPENSUSE-SU-2025:15676-1 dovecot24-2.4.2-1.1 on GA media
These are all security issues fixed in the dovecot24-2.4.2-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-62705
OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...
CVE-2025-62513
CVE-2025-62513 concerns OpenBao versions 2.2.0–2.4.1 where raw HTTP bodies were not redacted in the audit log, exposing ACME verification codes and OIDC/auth-related response data. The root cause is a logging regression affecting audit logs rather than a codepath in normal operation. The issue is...
Debian dla-4329 : libfcgi-bin - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4329 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4329-1 [email protected] https://www.debian.org/lts/security/...
EUVD-2023-43349
Malicious code in bioql PyPI...
EUVD-2022-0231
Malicious code in bioql PyPI...
EUVD-2025-26937
Malicious code in bioql PyPI...
EUVD-2022-0230
Malicious code in bioql PyPI...
EUVD-2022-6799
Malicious code in bioql PyPI...
EUVD-2023-37492
Malicious code in bioql PyPI...
EUVD-2022-53926
Malicious code in bioql PyPI...
EUVD-2024-43292
Malicious code in bioql PyPI...
EUVD-2024-1840
Malicious code in bioql PyPI...
