10882 matches found
Selesta Visual Access Manager vam_visits.php file cross-site scripting vulnerability
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in the Selesta Visual Access Manager vamvisits.php file, no details of the vulnerability are available at this time...
Selesta Visual Access Manager Cross-Site Scripting Vulnerability
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in Selesta Visual Access Manager, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no detailed vulnerability details a...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22579)
Selesta Visual Access Manager is a visual access manager from Selesta. Selesta Visual Access Manager suffers from a SQL injection vulnerability that can be exploited by an attacker to perform SQL injection in multiple POST parameters of /var/vamanagraph.php...
CVE-2025-23951: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DIVENGINE Gallery: Hybrid – Advanced Visual Gallery hybrid-gallery allows Stored XSS.This issue affects Gallery: Hybrid – Advanced Visual Gallery: from n/a through = 1.4.0.2...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22656)
Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to perform SQL injection in the POST parameter of /vam/vameps.php...
CVE-2025-22759
CVE-2025-22759 : Stored XSS in BoldGrid Post and Page Builder (Visual Drag and Drop Editor) affecting BoldGrid Post and Page Builder versions up to 1.27.5. Public description notes improper input neutralization during web page generation. Connected sources (Wordfence/Red Hat) indicate the patch s...
CVE-2025-22759 WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Stored XSS.This issue affects Post and Page Builder by BoldGrid: from n/a through = 1.27.5...
UBUNTU-CVE-2025-21176
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...
WordPress plugin Post and Page Builder by BoldGrid – Visual Drag and Drop Editor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...
PT-2025-4679
Name of the Vulnerable Software and Affected Versions Post and Page Builder by BoldGrid – Visual Drag and Drop Editor versions 1.27.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This...
UBUNTU-CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
Vim 9.1.1003 (GHSA-5rgf-26wj-48v8)
The version of Vim installed on the remote host is prior to 9.1.1003. It is, therefore, affected by a vulnerability as referenced in the GHSA-5rgf-26wj-48v8 advisory. - When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow...
GHSA-GJF6-3W4P-7XFH Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
GHSA-JJCV-WR2G-4RV4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers ca...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Visual Studio and .NET. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, access sensitive data or execute arbitrary code in the victim's context. Successful exploitation requires the malicious party to trick the...
CVE-2025-21405
Visual Studio Elevation of Privilege Vulnerability...
