26 matches found
CVE-2026-10025
creationtimestamp| type| source ---|---|--- 2026-08-11 05:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrtsmtjth2x...
CVE-2025-10025
A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2012-10025 WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
The WordPress plugin Advanced Custom Fields ACF version 3.5.1 and below contains a remote file inclusion RFI vulnerability in core/actions/export.php. When the PHP configuration directive allowurlinclude is enabled default: Off, an unauthenticated attacker can exploit the acfabspath POST paramete...
CVE-2013-10025
A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the file exitpage.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.59 is...
CVE-2015-10025
A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and...
CVE-2013-10025
A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the file exitpage.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.59 is...
MSC-2023-10025
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
SUSE CVE-2016-10025
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions aka SVM allows local HVM guest OS users to cause a denial of service hypervisor crash by leveraging a missing NULL pointer check...
CVE-2015-10025
CVE-2015-10025 affects the luelista miniConf product lineage up to version 1.7.6. The vulnerability targets an unknown functionality in the file miniConf/MessageView.cs within the URL Scanning component, causing a denial of service when exploited. Upgrading to versions 1.7.7 or 1.8.0 addresses th...
MSC-2022-10025
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...
CVE-2020-10025
CVE-2020-10025 is a reservation duplicate of CVE-2020-10067 and is not used.
Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2017 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.170718, 11.1.1.9.x prior to 11.1.1.9.170718, 12.2.1.1.x prior to 12.2.1.1.170718, or 12.2.1.2.x prior to 12.2.1.2.170718. It is, therefore, affected by multiple vulnerabilities as note...
CVE-2019-10025
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits...
UBUNTU-CVE-2019-10025
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits...
CVE-2019-10025
CVE-2019-10025 affects Xpdf 4.01.01, with a fault in ImageStream::ImageStream in Stream.cc for nBits that causes a faulting/potential exploitation path (FPE). The linked documents consistently describe the vulnerability as an FPE in the ImageStream constructor, without providing concrete exploit ...
CVE-2011-10025
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/subtitleprocessorm3ubof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08...
CVE-2017-10025
Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful...
CVE-2017-10025
CVE-2017-10025 affects Oracle Fusion Middleware BI Publisher, specifically the BI Publisher Security component in 11.1.1.7.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, potentially yielding unauthorized access to critical data or data wit...
CVE-2016-10025
CVE-2016-10025 affects the Xen hypervisor when running on x86 with AMD SVM (VMFUNC emulation) and allows local HVM guests to crash the hypervisor due to a missing NULL pointer check in hvmemul_vmfunc(). Public references in the connected data show Xen versions 4.6.x–4.8.x as vulnerable and descri...