Lucene search
+L

2087 matches found

CVE
CVE
added 2025/10/21 4:28 a.m.28 views

CVE-2025-62694

CVE-2025-62694 is a stored XSS in the Wikimedia Foundation MediaWiki WikiLove Extension (version 1.39). The root cause is improper neutralization of input during web page generation. This issue is described across multiple feeds as affecting the WikiLove Extension: 1.39, with a CVSS v4 base score...

6.9CVSS5.7AI score0.00353EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/21 4:02 a.m.4 views

CVE-2025-62695 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

6.9CVSS5.7AI score0.00319EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/20 7:27 p.m.4 views

CVE-2025-62697 Improperly sanitized style parameter in LanguageSelector

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki - LanguageSelector Extension allows Code Injection.This issue affects Mediawiki - LanguageSelector Extension: from master before 1.39...

8.8CVSS6.7AI score0.00324EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/18 6:30 a.m.11 views

EUVD-2025-34962

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - UploadWizard Extension allows Stored XSS.This issue affects Mediawiki - UploadWizard Extension: from master before 1.39...

6.9CVSS5.6AI score0.00418EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/18 4:13 a.m.14 views

CVE-2025-62664 Stored XSS through a system message in ImageRating

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - ImageRating Extension allows Stored XSS.This issue affects Mediawiki - ImageRating Extension: from master before 1.39...

6.9CVSS0.00418EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/13 9:31 p.m.13 views

EUVD-2025-34083

Liferay Mentions Web is Vulnerable to Cross-site Scripting...

4.8CVSS6.1AI score0.00207EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/10/13 9:31 p.m.16 views

Liferay Mentions Web is Vulnerable to Cross-site Scripting

Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users t...

5.4CVSS5.7AI score0.00207EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/10/13 9:15 p.m.15 views

CVE-2025-62246

Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users t...

5.4CVSS0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/13 8:21 p.m.45 views

CVE-2025-62246

CVE-2025-62246 is a stored XSS in Liferay Portal 7.4.x and Liferay DXP (older and unsupported versions) due to improper sanitization of name fields in com.liferay.mentions.web; exploited when a crafted first/mmiddle/last name is rendered in widgets/apps such as page comments, blog comments, docs/...

5.4CVSS5.3AI score0.00207EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/10/13 8:21 p.m.4 views

CVE-2025-62246

Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users t...

4.8CVSS5.3AI score0.00207EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-61224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter CVE-2025-61224...

6.5CVSS6.3AI score0.01454EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2010-1410

Malware in sbrugna...

3.5CVSS7.5AI score0.0147EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-5852

Malware in sbrugna...

6.1CVSS6.3AI score0.01354EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-25752

Malware in sbrugna...

6.1CVSS6.3AI score0.0057EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2005-1801

Malware in sbrugna...

4.3CVSS6.1AI score0.00938EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-11565

Malware in sbrugna...

7.5CVSS7.6AI score0.02279EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2006-6872

Malware in sbrugna...

7.5CVSS6.4AI score0.02191EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2006-2858

Malware in sbrugna...

7.5CVSS6.4AI score0.01236EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2013-1074

Malware in sbrugna...

4.3CVSS6.4AI score0.02031EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2011-4507

Malware in sbrugna...

4CVSS6.1AI score0.01112EPSS
SaveExploits0References4
Rows per page
Query Builder