Lucene search
+L

237 matches found

Patchstack
Patchstack
added 2026/02/26 10:52 a.m.17 views

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerability

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin = 1.25 - SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Attractive Donations System - Easy Stripe & Paypal donations versions = 1.25...

9.3CVSS6AI score0.00241EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/02/19 12:00 a.m.10 views

SUSE SLES16 Security Update : go1.25 (SUSE-SU-2026:20428-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20428-1 advisory. Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows...

10CVSS5.8AI score0.00778EPSS
SaveExploits1References8
OSV
OSV
added 2026/02/10 12:00 a.m.5 views

OPENSUSE-SU-2026:10164-1 go1.25-1.25.7-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.7-1.1 package on the GA media of openSUSE Tumbleweed...

8.6CVSS5.8AI score0.00481EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/04 9:29 p.m.45 views

CVE-2026-25536 @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data leak when a single McpServer/Server and transport instance is reused across multiple client connections, most commonly in stateless...

7.1CVSS0.00277EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:00 a.m.15 views

SUSE SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:0297-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0297-1 advisory. Update to version 1.25.6 released 2026-01-15 jscSLE-18320, bsc1244485: Security fixes: - CVE-2025-4674 cmd/go: disable support for...

10CVSS8.1AI score0.02128EPSS
SaveExploits5References73
SUSE Linux
SUSE Linux
added 2026/01/26 4:11 p.m.12 views

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.6 released 2026-01-15 jscSLE-18320, bsc1244485: Security fixes: CVE-2025-4674 cmd/go: disable support for multiple vcs in one module bsc1246118. CVE-2025-47906 os/exec: LookPath bug: incorrect expansion of "", "." a...

9.3CVSS7.2AI score0.02128EPSS
SaveExploits5References102
OSV
OSV
added 2026/01/18 12:00 a.m.7 views

OPENSUSE-SU-2026:10064-1 go1.25-1.25.6-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.6-1.1 package on the GA media of openSUSE Tumbleweed...

10CVSS5.8AI score0.02128EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-61731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The cgo pkg-config:...

8.6CVSS7AI score0.00552EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-61730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries for instance the Client Hello and Encrypted Extensio...

5.3CVSS6.7AI score0.00286EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-68119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from...

7CVSS8.1AI score0.00349EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-61728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service...

6.5CVSS6.8AI score0.00668EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/10 5:41 a.m.13 views

CVE-2025-22715

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: fro...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/08 10:15 a.m.12 views

CVE-2025-22715

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WPAttractiveDonationsSystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: fro...

7.5CVSS0.00432EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/08 7:55 a.m.14 views

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerability

WordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin = 1.25 - Arbitrary Content Deletion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WP Attractive Donations System - Easy Stripe & Paypal donations versions = 1.25...

8.1CVSS7AI score0.00432EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/12/18 8:16 a.m.10 views

CVE-2025-58933

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Anubis anubis allows PHP Local File Inclusion.This issue affects Anubis: from n/a through = 1.25...

8.1CVSS0.00488EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/18 8:15 a.m.9 views

CVE-2025-58706

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through = 1.25...

8.1CVSS5.8AI score0.00488EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.3 views

CVE-2025-58933 WordPress Anubis theme <= 1.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Anubis anubis allows PHP Local File Inclusion.This issue affects Anubis: from n/a through = 1.25...

8.1CVSS6.7AI score0.00488EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.26 views

CVE-2025-58933

The CVE-2025-58933 entry concerns the WordPress Anubis theme/plugin (WordPress Anubis theme, version

8.1CVSS6.7AI score0.00488EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2025/12/18 7:21 a.m.15 views

CVE-2025-58933

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Anubis anubis allows PHP Local File Inclusion.This issue affects Anubis: from n/a through = 1.25...

8.1CVSS7.2AI score0.00488EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.8 views

WordPress plugin Anubis 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.1CVSS6.6AI score0.00488EPSS
SaveExploits0References1
Rows per page
Query Builder