92 matches found
CVE-2026-1565
The CVE-2026-1565 entry describes a vulnerability in the WordPress plugin WP User Frontend (AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration) up to version 4.2.8. Root cause: incorrect file-type validation in WPUF_Admin_Settings::check_filetype_and_ext and Admi...
CVE-2025-69325
Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData for Woocommerce: from n/a through = 4.2.8...
CVE-2025-69325
Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData for Woocommerce: from n/a through = 4.2.8...
PT-2026-21141
Name of the Vulnerable Software and Affected Versions Primer MyData for Woocommerce versions through 4.2.8 Description The software contains a path traversal flaw. The issue allows attackers to potentially access files and directories outside the intended scope by manipulating file paths using th...
CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the io.netty.handler.codec.http.HttpRequestEncoder has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when HttpRequestEncod...
OESA-2025-2529 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
OESA-2025-2526 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
OESA-2025-2528 netty security update
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...
DEBIAN-CVE-2025-59419
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return \r and Line Feed \n characters in user-suppli...
EUVD-2023-1811
Malicious code in bioql PyPI...
PT-2025-39243
Name of the Vulnerable Software and Affected Versions MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress versions prior to 4.2.9 Description The software is susceptible to unauthorized data modification, potentially allowing attackers to escalate privileges...
HPESBNW04832 rev.1 - HPE Telco Intelligent Assurance, Multiple Netty Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Intelligent Assurance FAS and PDO 4.2.8 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-24970 |...
jasper-4.2.8-2.1 on GA media (moderate)
jasper-4.2.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15448-1 Rating: moderate Cross-References: CVE-2025-8835 CVE-2025-8836 CVE-2025-8837 CVSS scores: CVE-2025-8835 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-8835 SUSE : 6.8...
OPENSUSE-SU-2025:15447-1 jasper-4.2.8-2.1 on GA media
These are all security issues fixed in the jasper-4.2.8-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-22165
This Medium severity ACE Arbitrary Code Execution vulnerability was introduced in version 4.2.8 of Sourcetree for Mac. This ACE Arbitrary Code Execution vulnerability, with a CVSS Score of 5.9, allows a locally authenticated attacker to execute arbitrary code which has high impact to...
Atlassian Sourcetree for Mac 安全漏洞
Atlassian Sourcetree for Mac is a GUI tool for version control systems from Atlassian Australia. A security vulnerability exists in Atlassian Sourcetree for Mac version 4.2.8, which originates from a local attacker who can execute arbitrary code under the context of the user running the program...
CVE-2023-3109
Cross-site Scripting XSS - Stored in GitHub repository admidio/admidio prior to 4.2.8...
WordPress plugin Splitit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...