Lucene search
+L

3264 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:46 a.m.6 views

CVE-2025-32300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...

7.1CVSS5.2AI score0.0018EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/08 3:14 a.m.7 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00294EPSS
Exploits0References1
NVD
NVD
added 2026/01/07 1:15 p.m.7 views

CVE-2025-47552

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS0.0032EPSS
Exploits0References1
NVD
NVD
added 2026/01/07 12:17 p.m.8 views

CVE-2025-32300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25...

7.1CVSS0.0018EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:14 a.m.7 views

CVE-2024-2031

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zoomrecordingsbymeeting' shortcode in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.0032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.12 views

PT-2026-1643

Name of the Vulnerable Software and Affected Versions Digital zoom studio DZS Video Gallery versions through 12.25 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected Cross-site Scripting XSS condition. This allows for the...

7.1CVSS6.1AI score0.0018EPSS
Exploits0References3
NVD
NVD
added 2026/01/06 5:15 p.m.8 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS0.00294EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/06 4:47 p.m.10 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00294EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.13 views

PT-2026-1495

Name of the Vulnerable Software and Affected Versions Digital zoom studio DZS Video Gallery versions through 12.25 Description A flaw exists in Digital zoom studio DZS Video Gallery that allows for object injection due to deserialization of untrusted data. This issue could potentially allow an...

8.8CVSS6.7AI score0.00294EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.4 views

WordPress和WordPress plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS5.7AI score0.00149EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/19 7:33 a.m.5 views

CVE-2025-49919

Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...

5.8CVSS5.9AI score0.00169EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 8:15 a.m.6 views

CVE-2025-49919

Insertion of Sensitive Information Into Sent Data vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Retrieve Embedded Sensitive Data.This issue affects eRoom: from n/a through = 1.5.6...

5.8CVSS0.00169EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.12 views

CVE-2025-49919

CVE-2025-49919 is a vulnerability in the WordPress plugin “eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams” (WPCenter eRoom) rated as Medium (CVSS 3.1: 5.8). Affected versions: eRoom up to 1.5.6. Description in the initial document: Insertion of Sensitive Information Into ...

5.8CVSS5.9AI score0.00169EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.14 views

PT-2025-52019

Name of the Vulnerable Software and Affected Versions WPCenter eRoom versions through 1.5.6 Description A flaw exists in WPCenter eRoom eroom-zoom-meetings-webinar that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendation...

5.8CVSS6.3AI score0.00169EPSS
Exploits0References3
NVD
NVD
added 2025/12/16 3:15 a.m.9 views

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

8.8CVSS0.00734EPSS
Exploits1References4
OSV
OSV
added 2025/12/16 3:15 a.m.8 views

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

8.8CVSS5.4AI score0.00734EPSS
Exploits1References4
EUVD
EUVD
added 2025/12/16 3:2 a.m.5 views

EUVD-2025-203496

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

6.3CVSS5.7AI score0.00734EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.5 views

Ningyuanda TC155 访问控制错误漏洞

The Ningyuanda TC155 is an IP camera from the Chinese company Ningyuanda. An access control error vulnerability exists in the Ningyuanda TC155 version 57.0.2.0, which stems from improper access control of the ONVIF PTZ control interface component, which could lead to unauthorized access...

8.8CVSS6.5AI score0.00734EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.7 views

Zoom Rooms Installed (Windows)

Binary data winzoomroomsinstalled.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.7 views

Zoom Rooms Installed (macOS)

Binary data macoszoomroomsinstalled.nbin...

7AI score
Exploits0References1
Rows per page
Query Builder