CBL Mariner 2.0 Security Update: kernel (CVE-2025-22063)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22063 advisory. - In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21887)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21887 advisory. - In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovldentryupdatereval by...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-58083)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58083 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21811)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21811 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with n...

PT-2025-19927 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 2.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /visitor-detail.php. The manipulation of the editid argument leads to SQL injection...

PT-2025-19808 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 2.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/change-password.php. This issue leads to SQL injection and can be initiated remotely...

CBL Mariner 2.0 Security Update: CBL-Mariner Releases / apparmor (CVE-2016-1585)

The version of CBL-Mariner Releases / apparmor installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-1585 advisory. - In all versions of AppArmor mount rules are accidentally widened when compiled...

PT-2025-18954 · Unknown · Phpgurukul Online Birth Certificate System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Birth Certificate System version 2.0 Description: A critical vulnerability was found in the PHPGurukul Online Birth Certificate System. The issue affects an unknown functionality of the file /admin/between-dates-report.php...

CVE-2025-4100 Nautic Pages <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'npmarinetrafficmap' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-4144

PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27...

PT-2025-18369 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Park Ticketing Management System version 2.0 Description: A critical vulnerability was found in the PHPGurukul Park Ticketing Management System. The issue affects an unknown functionality of the file /profile.php, where the...

CBL Mariner 2.0 Security Update: crash / gdb (CVE-2022-47673)

The version of crash / gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47673 advisory. - An issue was discovered in Binutils addr2line before 2.39.3, function parsemodule contains multiple out...

CBL Mariner 2.0 Security Update: crash (CVE-2023-25585)

The version of crash installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25585 advisory. - A flaw was found in Binutils. The use of an uninitialized field in the struct module module May lead to...

CBL Mariner 2.0 Security Update: openssh (CVE-2025-32728)

The version of openssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32728 advisory. - In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation statin...

WordPress Image Hover Effects For WPBakery Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Image Hover Effects For WPBakery Page Builder versions = 2.0...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32906)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32906 advisory. - A flaw was found in libsoup, where the soupheadersparserequest function May be vulnerable to an out- of-bou...

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-32913)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32913 advisory. - A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a...

CVE-2025-46235

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 2.0...

CVE-2025-46235

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 2.0...

PT-2025-17574

Name of the Vulnerable Software and Affected Versions Jmix versions 1.0.0 through 1.6.1 Jmix versions 2.0.0 through 2.3.4 Description The local file storage implementation in Jmix does not restrict the size of uploaded files, allowing an attacker to upload excessively large files and potentially...