150645 matches found
CVE-2025-20291
A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability exist...
Real-Estate-website-in-PHP 安全漏洞
Real-Estate-website-in-PHP is a free and open source real estate website by scriptandtools individual developers. A security vulnerability exists in Real-Estate-website-in-PHP version 1.0, which originates from an incorrect manipulation of the file /admin/userlist.php resulting in execution after...
CVE-2025-9378: Improper Neutralization of Input During Web Page Generation
The Vayu Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple attributes in the Lottie block in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for...
JetBrains YouTrack XSS
The vulnerability of the JetBrains YouTrack project management and task management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
SonicWall SMA Network Firewall Code Execution
The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-55473: Improper Neutralization of Input During Web Page Generation
Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...
SAP Business Objects Business Intelligence Platform XSS
The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Asian Arts Talents Foundation Website 安全漏洞
Asian Arts Talents Foundation Website is a website of Asian Arts Talents Foundation, Inc. A security vulnerability exists in Asian Arts Talents Foundation Website version v5.1.x, which stems from improper handling of the X-Forwarded-For header and could lead to cross-site scripting attacks...
CVE-2025-55473
Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...
CVE-2025-9773 RemoteClinic edit.php cross site scripting
A flaw has been found in RemoteClinic up to 2.0. This vulnerability affects unknown code of the file /staff/edit.php. Executing manipulation of the argument Last Name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used...
ABAP Application Server Unauthorized Access
The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP BIC Document is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...
CVE-2025-20317
A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An...
Linux Distros Unpatched Vulnerability : CVE-2021-1799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security...
IBM System Storage Virtualization Engine Code Execution
The vulnerability of the IBM System Storage Virtualization Engine virtualization platform relates to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
1C:Enterprise 8 Code Execution
Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...