Lucene search
+L

197029 matches found

CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•24 views

WordPress plugin Instant-Quote.co: Quotation Page – Cross-site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.5AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

WordPress plugin Responsive Video Embedder has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

WordPress plugin Formidable Kinetic has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•32 views

UTT HiPER 1200GW security vulnerabilities

UTT HiPER 1200GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1200GW prior to 2.5.3-170306 contained security vulnerabilities. These vulnerabilities were caused by unknown functions in the Web Management Interface component/goform/formPptpClientConfig file, whi...

9CVSS8.3AI score0.00792EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•46 views

FoxCMS authorization issue vulnerability

FoxCMS is a content management system provided by FoxCMS Company in China, available for free commercial use and open source. Versions of FoxCMS 1.2.6 and earlier have a licensing issue vulnerability, which stems from a weak password recovery vulnerability in the Edit function of the Admin.php fi...

5.8CVSS5.5AI score0.00376EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•30 views

Tanium Server security vulnerabilities

Tanium Server is a security management platform developed by the American company Tanium. Tanium Server has a security vulnerability, which stems from a denial-of-service vulnerability...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

Tanium Connect security vulnerabilities

Tanium Connect is a data exchange module developed by the American company Tanium. Tanium Connect has a security vulnerability, which stems from an unauthorized code execution flaw...

8.8CVSS6.1AI score0.00653EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•37 views

WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin: Resource management error vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00437EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

Itsourcecode Courier Management System SQL Injection Vulnerability

itsourcecode Courier Management System is an open-source courier management system developed by itsourcecode. Version 1.0 of the itsourcecode Courier Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter “s” in the file...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•35 views

Itsourcecode Courier Management System SQL Injection Vulnerability

itsourcecode Courier Management System is an open-source courier management system developed by itsourcecode. Version 1.0 of the itsourcecode Courier Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameter IDs in the file/manageuser.php,...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

GitHub Enterprise Server security vulnerabilities

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21.1 of GitHub Enterprise Server, there was a security...

7CVSS5.9AI score0.007EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•32 views

Hitachi Vantara Pentaho Data Integration and Analytics security vulnerabilities

Hitachi Vantara Pentaho Data Integration and Analytics is a business intelligence dashboard designer developed by Hitachi Vantara Corporation in the United States. Versions of Hitachi Vantara Pentaho Data Integration and Analytics prior to 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, contain...

6.3CVSS6.6AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•30 views

Hitachi Vantara Pentaho Data Integration & Analytics security vulnerabilities

Hitachi Vantara Pentaho Data Integration & Analytics is a data integration and analysis system developed by Hitachi, Ltd. Versions of Hitachi Vantara Pentaho Data Integration & Analytics prior to 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, contained security vulnerabilities. These...

4.3CVSS5.5AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•23 views

Unzip security vulnerabilities

Unzip is a Golang.zip decompression tool developed by Yige’s developers. Versions of Unzip prior to 2.215 contained security vulnerabilities. These vulnerabilities stemmed from failing to catch exceptions when parsing zip headers with incorrect DOS date formats. As a result, an exception was thro...

5.5CVSS6AI score0.00127EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

WordPress plugin Yoast SEO has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.8AI score0.00288EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

WordPress plugin Splide Carousel Block has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.5AI score0.00331EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

ZTE ZXUniPOS NDS-LTE security vulnerabilities

ZTE ZXUniPOS NDS-LTE is an operator network positioning platform developed by ZTE Corporation. ZTE ZXUniPOS NDS-LTE has a security vulnerability. This vulnerability arises from attackers carefully constructing malicious scripts and injecting them into target systems. When other users access pages...

5.7CVSS5.9AI score0.00298EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•27 views

WordPress plugin SeedProd Pro has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.5CVSS5.7AI score0.00511EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome on Windows before 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from a problem with reuse after release in the Password module, which could allow remote attackers who have...

8.3CVSS6.9AI score0.00185EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of resources after they were released in Dawn, which could allow remote attackers to execute a sandbox...

9.6CVSS8.7AI score0.00319EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•28 views

Google Chrome on Android has a buffer error vulnerability

Google Chrome on Android is a web browser in the Android operating system developed by Google Inc. Versions prior to 148.0.7778.216 of Google Chrome on Android had a buffer error vulnerability. This vulnerability stemmed from out-of-bounds reading in the WebGL component, which could allow remote...

9.6CVSS7AI score0.00345EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•27 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of WebRTC after it was released, which could allow remote attackers to execute arbitrary code within a...

8.8CVSS8.5AI score0.00484EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from a problem with UI components that allowed reusing of resources after they were released. This could allow remote...

8.3CVSS8.1AI score0.00304EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•28 views

WordPress plugin Post Category Gallery has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•37 views

WordPress plugin: Islamic Database cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•32 views

WordPress plugin Responsive Check: Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.7AI score0.00331EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•23 views

WordPress plugin Google+ Link Name Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•32 views

WordPress plugin Genzel Breadcrumbs vulnerable to Cross-Site Request Forgery attacks

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

4.3CVSS5.8AI score0.0019EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•38 views

WordPress plugin Cryptocurrency Prijsvergelijking Widget cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.7AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•34 views

WordPress plugin auto-making JSON-LD cross-site request forgeing vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.7AI score0.00184EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•27 views

WordPress plugin “Events In City” – Cross-site scripting vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. In...

6.4CVSS5.5AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

WordPress plugin iWR Tooltip: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.5AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

WordPress plugin Easy Prism Syntax Highlighter has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.9AI score0.00321EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•28 views

WordPress plugin Team Master has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

MB Connect Line mbCONNECT24 and MB Connect Line mymbCONNECT24 have SQL injection vulnerabilities

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

8.7CVSS6AI score0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•36 views

WordPress plugin Enable jQuery Migrate Helper has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.5CVSS5.7AI score0.00389EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•35 views

WordPress plugin Gutenverse has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.5AI score0.00643EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•30 views

WordPress plugin WPBakery Page Builder Addons by Livemesh has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application add-on. The WordPre...

6.4CVSS5.5AI score0.00235EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•28 views

WordPress plugin Query Shortcode security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS6AI score0.00831EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•28 views

WordPress plugin WP Promoter has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00466EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

WordPress plugin GoStats for WordPress: Cross-site Request Forgery Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.3CVSS5.7AI score0.00184EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

WordPress plugin Search Simple Fields has a cross-site request forgeing vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.7AI score0.00184EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

WordPress plugin CDN Linker lite has a vulnerability related to cross-site request forgeing.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.7AI score0.00184EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•29 views

WordPress plugin Livemesh Addons for Beaver Builder has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.8AI score0.00304EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•25 views

WordPress plugin Livemesh SiteOrigin Widgets has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.8AI score0.00304EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•35 views

WordPress plugin LiteSpeed Cache has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.2CVSS5.6AI score0.00438EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•33 views

Phoenix Contact’s various products have code-related vulnerabilities

PHOENIX CONTACT AXC F 1152 and PHOENIX CONTACT AXC F 2152 are controller devices from the German company PHOENIX CONTACT. Several products from Phoenix Contact have code vulnerabilities. These vulnerabilities allow low-privilege local users to manipulate configuration or application-related files...

8.7CVSS6AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•30 views

PHOENIX CONTACT’s various products have vulnerabilities related to data manipulation and falsification.

PHOENIX CONTACT AXC F 1152, among others, are controller devices produced by the German company PHOENIX CONTACT. Several products from PHOENIX CONTACT have vulnerabilities related to data manipulation. These vulnerabilities stem from the lack of a data validation mechanism when allowing remote,...

8.8CVSS6.9AI score0.00218EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•20 views

WordPress plugin “Login with NEAR” has a vulnerability regarding authorization issues.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.1CVSS5.8AI score0.00672EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•26 views

WordPress plugin Tuxquote has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00321EPSS
SaveExploits0References3
Total number of security vulnerabilities197029