CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-7633

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report...

libssh: out-of-bounds read in sftp_handle()

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in...

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-64198 WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 10.7.1...

CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2

CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-58963

Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through 1.1.9...

CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12

CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12. A patched version of the package is available...

CVE-2025-59571

CVE-2025-59571 describes a Reflected XSS in the WordPress WorkScout-Core plugin, affecting versions older than 1.7.06. The issue arises from improper input neutralization during web page generation. CVSS 3.1 base score 7.1 ( HIGH ) with network access, low impacts to confidentiality/integrity/ava...

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...

CVE-2024-45338 affecting package cni for versions less than 1.0.1-20

CVE-2024-45338 affecting package cni for versions less than 1.0.1-20. A patched version of the package is available...

AZL-68664 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3. A patched version of the package is available...

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30. A patched version of the package is available...

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...