292 matches found
CVE-2025-68276 affecting package avahi for versions less than 0.8-5
CVE-2025-68276 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...
CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11
CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11. A patched version of the package is available...
CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1
CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1. A patched version of the package is available...
WordPress Hubbub Lite plugin < 1.32.0 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Tycho Niestadt in WordPress Plugin Hubbub Lite versions 1.32.0...
CVE-2026-22221 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2vpn modules and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...
CVE-2026-25200
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1...
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1
CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...
CVE-2026-23974 WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through 1.7.5...
AZL-74967 CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover...
WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Biagiotti versions 3.5.2...
firefox: thunderbird: Information disclosure in the Networking component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...
CVE-2025-40942
A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.4. Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges...
CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1
CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1. A patched version of the package is available...
PT-2026-2625
CVE-2025-9435 Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module https://t.co/X5Q8U1d7zf...
CVE-2025-67937 WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a through 1.7...
CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1
CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...
Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)
The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...
CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1
CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1. An upgraded version of the package is available that resolves this issue...
WordPress Email Subscribers plugin < 5.7.45 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Email Subscribers & Newsletters versions 5.7.45...