1270 matches found
CVE-2025-57904
The CVE-2025-57904 entry describes a stored XSS vulnerability in WP-EXPERTS.IN Sales Count Manager for WooCommerce. Affected product: Sales Count Manager for WooCommerce (
WordPress Leblix Theme <= 2.4 is vulnerable to Local File Inclusion
Software Leblix Type Theme Vulnerable versions = 2.4 Fixed in 2.5 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-58995 Patch priority High CVSS severity High 8.1 Developer PBM Infotech Private Limited PSID 23479542d08b Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
Linux Distros Unpatched Vulnerability : CVE-2022-21688
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Affected...
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805 Patch Instructions: To install this SUSE update use the SUSE recommended...
SUSE-SU-2025:02739-2 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 - CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805...
RHSA-2025:14686 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Bulletin has no description...
CVE-2025-29887
The CVE-2025-29887 entry describes a command injection vulnerability in QuRouter 2.5.1 . If an attacker gains an administrator account , they can exploit the flaw to execute arbitrary commands with high impact. Public metrics indicate a HIGH severity (CVSS v3.1: 7.2, Confidentiality/Integrity/Ava...
CVE-2025-53564
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbgradioplayeraddonvisualcomposer allows Reflected XSS.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a...
Linux Distros Unpatched Vulnerability : CVE-2010-5105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.ble...
CVE-2025-53564 WordPress HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbgradioplayeraddonvisualcomposer allows Reflected XSS.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a...
PT-2025-33985 · Unknown +1 · Wpbakery Page Builder +1
Name of the Vulnerable Software and Affected Versions: LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon versions through 2.5 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows f...
SUSE: Security Advisory (SUSE-SU-2025:02739-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2025:02739-1 Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 - CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2023-53155
goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...
CVE-2025-31070
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon lbg-cleverbakery allows Path Traversal.This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through = 2.5...
CVE-2025-47608
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows SQL Injection.This issue affects Recover abandoned cart for WooCommerce: from n/a through = 2.5...
CVE-2025-31050 WordPress Apptha Slider Gallery plugin <= 2.5 - Arbitrary File Read vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in appthaplugins Apptha Slider Gallery apptha-slider-gallery allows Path Traversal.This issue affects Apptha Slider Gallery: from n/a through = 2.5...
SUSE CVE-2025-31257
This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash...