2521 matches found
OPENSUSE-SU-2025:15522-1 libwireshark18-4.4.9-2.1 on GA media
These are all security issues fixed in the libwireshark18-4.4.9-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-36004
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.1 Description: PHPGurukul Online Shopping Portal version 2.1 is susceptible to Cross Site Scripting XSS in the /admin/updateorder.php endpoint. Recommendations: As a mitigation, consider implementin...
OPENSUSE-SU-2025:15514-1 python311-uv-0.8.14-2.1 on GA media
These are all security issues fixed in the python311-uv-0.8.14-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-56254
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference IDOR vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users...
Linux Distros Unpatched Vulnerability : CVE-2022-2454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. CVE-2022-2454 Note that Nessus relies on the presence of the package as reported...
Linux Distros Unpatched Vulnerability : CVE-2022-4202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the fil...
OPENSUSE-SU-2025:15498-1 ImageMagick-7.1.2.2-2.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15497-1 scx-1.0.15-2.1 on GA media
These are all security issues fixed in the scx-1.0.15-2.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 10 : mod_http2 (ELSA-2025-14625)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-14625 advisory. 2.0.29-2.1 - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module Tenabl...
CVE-2025-9412
A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public a...
CVE-2025-9413
A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/systemrouter.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. The exploit has been published and may ...
CVE-2025-9412 lostvip-com ruoyi-go DictDataDao.go SelectListByPage sql injection
A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public a...
Linux Distros Unpatched Vulnerability : CVE-2019-12308
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the...
Linux Distros Unpatched Vulnerability : CVE-2019-12108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for...
CVE-2025-48154
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
OPENSUSE-SU-2025:15476-1 gimp-3.0.4-2.1 on GA media
These are all security issues fixed in the gimp-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15473-1 abseil-cpp-devel-20250814.0-2.1 on GA media
These are all security issues fixed in the abseil-cpp-devel-20250814.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-33915 · WordPress · Multimedia Playlist Slider Addon For Wpbakery Page Builder
Name of the Vulnerable Software and Affected Versions: Multimedia Playlist Slider Addon for WPBakery Page Builder versions through 2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS...
cflow-1.8-2.1 on GA media (moderate)
cflow-1.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15459-1 Rating: moderate Cross-References: CVE-2023-6031 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cflow-1.8-2.1 package o...