CVE-2019-1020007

Dependency-Track before 3.5.1 allows XSS...

CVE-2017-1000191

Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS...

WordPress plugin Additional Custom Emails & Recipients for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2025-47624

Cross-Site Request Forgery CSRF vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin DoFollow Case by Case versions = 3.5.1...

CVE-2025-47625

CVE-2025-47625 denotes a Stored XSS in the WordPress plugin DoFollow Case by Case (vulnerable through version 3.5.1) due to improper input neutralization during web page generation. The initial description and connected sources indicate the issue affects DoFollow Case by Case up to 3.5.1; there i...

CVE-2025-47624

CVE-2025-47624 is a CSRF vulnerability in the WordPress plugin DoFollow Case by Case (versions up to 3.5.1). The issue permits unauthorized actions if a user is tricked into performing them; no exploitation details are provided in the documents. Public metrics in the initial record show a high im...

WordPress plugin DoFollow Case by Case 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

WordPress plugin DoFollow Case by Case 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress...

CVE-2025-27308

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.5.1 release

Red Hat build of OpenTelemetry 3.5.1 has been released Release of Red Hat OpenShift distributed tracing provides following security improvements, bug fixes, and new features. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing Enhancements: Nothing Bug fixes:...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.5.1 release

Red Hat OpenShift distributed tracing platform Tempo 3.5.1 has been released Release of Red Hat OpenShift distributed tracing provides following security improvements, bug fixes, and new features. The Red Hat OpenShift distributed tracing Tempo 3.5.1 is based on the open source...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.5.1 release

Red Hat OpenShift distributed tracing platform Tempo 3.5.1 has been released Release of Red Hat OpenShift distributed tracing provides following security improvements, bug fixes, and new features. The Red Hat OpenShift distributed tracing Tempo 3.5.1 is based on the open source...

CVE-2025-29085

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

vipshop Saturn SQL注入漏洞

vipshop Saturn is a platform that provides distributed, fault-tolerant, and highly available job scheduling services from China's Vipshop vipshop company. A security vulnerability exists in vipshop Saturn 3.5.1 and earlier versions, which stems from a SQL injection in the zkClusterKey component...

PT-2025-14546 · Vipshop · Saturn

Name of the Vulnerable Software and Affected Versions: vipshop Saturn versions 3.5.1 and earlier Description: The issue allows a remote attacker to execute arbitrary code. This can be achieved via the "/console/dashboard/executorCount" API endpoint, specifically by manipulating the zkClusterKey...

WordPress AliNext plugin <= 3.5.1 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh in WordPress Plugin AliNext versions = 3.5.1...

CVE-2025-30795 WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects FunnelKit Automations: from n/a through = 3.5.1...

CVE-2025-30795

CVE-2025-30795 is an Open Redirect affecting FunnelKit Automations (Autonami). Affected: FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce, up to version 3.5.1. The connected document indicates the vulnerability was patched (Patch Status: Patched). Impact is d...

WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Le Ngoc Anh in WordPress Plugin FunnelKit Automations versions = 3.5.1...