PT-2025-19727 · Shenzhen Sixun · Sixun Shanghui Group Business Management System

Name of the Vulnerable Software and Affected Versions: Shenzhen Sixun Software Sixun Shanghui Group Business Management System version 7 Description: A vulnerability was found in the system, affecting an unknown part of the file "/api/GylOperator/LoadData". The manipulation leads to information...

Oracle Linux 7 : virtuoso-opensource (ELSA-2025-4039)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4039 advisory. 1:6.1.6-7.0.1 - Back port fix for CVE-2024-57656 Orabug:37856848 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.3.13 (RHSA-2025:4437)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4437 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 6 / 7 : devtoolset-4-jackson-databind (RHSA-2017:1840)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1840 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security...

RHEL 7 : rh-eclipse46-jackson-databind (RHSA-2017:1839)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1839 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security Fixe...

RHSA-2025:4226 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2025-46510

Cross-Site Request Forgery CSRF vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.This issue affects Contact Form 7 Calendar: from n/a through = 3.0.1...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

[SECURITY] Fedora 42 Update: xz-5.8.1-2.fc42

XZ Utils are an attempt to make LZMA compression easy to use on free as in freedom operating systems. This is achieved by providing tools and libraries which are similar to use than the equivalents of the most popular existing compression algorithms. LZMA is a general purpose compression algorith...

CVE-2025-3247

The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7stripeskipspamcheck' function due to insufficient validation on a user controlled key. This makes it possible for unauthenticated attackers to reuse a single Stripe...

CVE-2025-46252

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows SQL Injection.This issue affects Message Filter for Contact Form 7: from n/a through = 1.6.3.2...

WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Contact Form 7 Calendar versions = 3.0.1...

CVE-2025-46510

Cross-Site Request Forgery CSRF vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.This issue affects Contact Form 7 Calendar: from n/a through = 3.0.1...

CVE-2025-46510 WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in harrysudana Contact Form 7 Calendar allows Stored XSS. This issue affects Contact Form 7 Calendar: from n/a through 3.0.1...

CVE-2025-46510

CVE-2025-46510 describes a CSRF to Stored XSS vulnerability in the WordPress plugin Contact Form 7 Calendar (harrysudana) affecting versions up to 3.0.1. The issue enables stored XSS via a CSRF, with CVSS v3.1 base score 7.1 (HIGH). No exploitation status is confirmed in the provided documents. R...

CVE-2025-46510 WordPress Contact Form 7 Calendar plugin <= 3.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in harrysudana Contact Form 7 Calendar cf7-calendar allows Stored XSS.This issue affects Contact Form 7 Calendar: from n/a through = 3.0.1...

PT-2025-29940

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.0.0 Description 7-Zip is a file archiver with a high compression ratio. A flaw exists in the RAR5 handler where writing zeroes outside of the heap buffer can cause memory corruption and denial of service...

PT-2025-29941

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.0.0 Description 7-Zip is a file archiver that supports extracting from Compound Documents. A null pointer dereference in the Compound handler may lead to denial of service. Recommendations Update to version 25.0.0 or...