Linux Distros Unpatched Vulnerability : CVE-2020-11736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is ...

CVE-2024-10904 Stored XSS in Server Admin API

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to create a stored crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required...

CVE-2025-23904

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rebrandpress Rebrand Fluent Forms rebrand-fluent-forms allows Reflected XSS.This issue affects Rebrand Fluent Forms: from n/a through = 1.0...

CVE-2025-23613

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2025-23549

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in agora32 Maniac SEO maniac-seo allows Reflected XSS.This issue affects Maniac SEO: from n/a through = 2.0...

CVE-2025-23446

Cross-Site Request Forgery CSRF vulnerability in KokoenDE WP SpaceContent wp-spacecontent allows Stored XSS.This issue affects WP SpaceContent: from n/a through = 0.4.5...

CVE-2025-26879

CVE-2025-26879 is a Reflected Cross‑Site Scripting (XSS) vulnerability affecting the WordPress plugin s2Member (Pro, up to build 241216). The issue arises from improper input neutralization during web page generation, enabling a reflected XSS payload to be executed in the context of a user’s brow...

CVE-2025-25164

CVE-2025-25164 affects WordPress Meta Accelerator plugin versions up to 1.0.4, where Reflected XSS arises from improper input neutralization during web page generation. Root cause: improper neutralization of user input leads to reflected cross-site scripting. Impact: XSS could affect pages render...

CVE-2025-25130

CVE-2025-25130 corresponds to a Relative Path Traversal that enables unauthenticated PHP Local File Inclusion in the WordPress plugin Delete Comments By Status (affected: Delete Comments By Status, versions

CVE-2025-25115

CVE-2025-25115 concerns the WordPress plugin Like dislike plus counter (also listed as Like Dislike Buttons) with a Cross-Site Scripting (XSS) vulnerability that allows stored XSS. The vulnerability affects version

CVE-2025-23883

CVE-2025-23883 affects the WordPress Stray Random Quotes plugin (versions up to 1.9.9). The root cause is improper input neutralization during web page generation, enabling reflected XSS. Impact described in connected sources indicates potential for executing script in a victim’s browser. Public ...

CVE-2025-23847

CVE-2025-23847 concerns the WordPress Site Launcher plugin (versions up to 0.9.4) where a Reflected XSS flaw arises from improper input neutralization during web page generation . This affects the Site Launcher plugin on WordPress sites and can reflect user-supplied input in a page, enabling pote...

CVE-2025-23740

CVE-2025-23740 describes a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Easy School Registration (versions up to and including 3.9.8). The root cause is Improper Neutralization of Input During Web Page Generation . Affected software is the WordPress Easy School Regis...

CVE-2025-23482

CVE-2025-23482 refers to a reflected Cross-Site Scripting vulnerability in the WordPress plugin NotFound azurecurve Floating Featured Image, affecting versions up to 2.2.0. The root cause is improper input neutralization during web page generation. Public sources (NVD, Red Hat, CVE lists, Patchst...

CVE-2025-23437

CVE-2025-23437 describes a reflected cross-site scripting vulnerability in the WordPress plugin ntp-header-images (NotFound) versions up to and including 1.2 . The issue stems from improper input neutralization during web page generation, enabling reflected XSS when processing input. Public docum...

Linux Distros Unpatched Vulnerability : CVE-2011-2483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cryptblowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit...

Linux Distros Unpatched Vulnerability : CVE-2004-2771

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell...

Linux Distros Unpatched Vulnerability : CVE-2010-4527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The loadmixervolumes function in sound/oss/soundcard.c in the OSS sound subsystem in the Linux kernel before 2.6.37 incorrectly expects that a certain name fiel...

Linux Distros Unpatched Vulnerability : CVE-2009-2473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial o...

Linux Distros Unpatched Vulnerability : CVE-2010-4706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pamsmclosesession function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not properly handle a failure to determine a...