6454 matches found
WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ? in WordPress Theme Togo versions 1.0.4...
GHSA-MR3Q-G2MV-MR4Q Sinatra is vulnerable to ReDoS through ETag header value generation
Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...
Sinatra is vulnerable to ReDoS through ETag header value generation
Summary There is a denial of service vulnerability in the If-Match and If-None-Match header parsing component of Sinatra, if the etag method is used when constructing the response and you are using Ruby = 3.2...
GHSA-Q5R6-9QWQ-G2WJ Amazon.IonDotnet is vulnerable to Denial of Service attacks
Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...
CVE-2025-34248 D-Link Nuclias Connect < v1.3.1.4 Directory Traversal to Arbitrary File Deletion
D-Link Nuclias Connect firmware versions 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity...
CVE-2025-11573
An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...
CVE-2025-11573
CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...
CVE-2025-32916 Sensitive form data in URL query parameters
Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...
CVE-2025-46819 affecting package valkey for versions less than 8.0.6-1
CVE-2025-46819 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...
CVE-2025-46818 affecting package valkey for versions less than 8.0.6-1
CVE-2025-46818 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...
PT-2025-41465
Name of the Vulnerable Software and Affected Versions D-Link Nuclias Connect versions prior to 1.3.1.4 Description The software contains a directory traversal issue in the /api/web/dnc/global/database/deleteBackup endpoint. This is due to insufficient input validation of the deleteBackupList...
CVE-2025-4674 affecting package golang for versions less than 1.18.8-10
CVE-2025-4674 affecting package golang for versions less than 1.18.8-10. A patched version of the package is available...
CVE-2025-47906 affecting package golang for versions less than 1.18.8-10
CVE-2025-47906 affecting package golang for versions less than 1.18.8-10. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2025-11153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3. CVE-2025-11153 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-11152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3. CVE-2025-11152 Note that Nessus...
AZL-68376 CVE-2025-11412 affecting package binutils for versions less than 2.37-19
A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and...
WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Neuronet versions 1.14.0...
WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Xcare versions 6.5...
