9049 matches found
Unspecified Vulnerability in Selesta Visual Access Manager (CNVD-2025-22661)
Selesta Visual Access Manager is a visual access manager from Selesta. A security vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to write arbitrary files by manipulating the POST parameter of the page common/vamSql.php...
Selesta Visual Access Manager Cross-Site Scripting Vulnerability (CNVD-2025-22314)
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in Selesta Visual Access Manager, which stems from the lack of effective filtering and escaping of user-supplied data in smonitormap.php, for which no detailed vulnerability details...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22658)
Selesta Visual Access Manager is a visual access manager from Selesta. Selesta Visual Access Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in /common/vamSql.php. An attacker can exploit this vulnerability to perform...
CVE-2025-22759 WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Stored XSS.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.5...
CVE-2025-22759
CVE-2025-22759 : Stored XSS in BoldGrid Post and Page Builder (Visual Drag and Drop Editor) affecting BoldGrid Post and Page Builder versions up to 1.27.5. Public description notes improper input neutralization during web page generation. Connected sources (Wordfence/Red Hat) indicate the patch s...
WordPress plugin Post and Page Builder by BoldGrid – Visual Drag and Drop Editor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...
UBUNTU-CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
Vim 9.1.1003 (GHSA-5rgf-26wj-48v8)
The version of Vim installed on the remote host is prior to 9.1.1003. It is, therefore, affected by a vulnerability as referenced in the GHSA-5rgf-26wj-48v8 advisory. - When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow...
UBUNTU-CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
GHSA-GJF6-3W4P-7XFH Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
GHSA-JJCV-WR2G-4RV4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, access sensitive data or execute arbitrary code in the victim's context. Successful exploitation requires the malicious party to trick the...
CVE-2025-21405
Visual Studio Elevation of Privilege Vulnerability...
CVE-2025-21405
Visual Studio Elevation of Privilege Vulnerability...
CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...