EUVD-2025-204454

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

CVE-2025-66522 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

Foxit PDF Editor 安全漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor that stems from the Common Name field in the Digital IDs feature not being properly cleaned or encoded, which could lead to a stored cross-site scripting attack...

SUSE: Security Advisory (SUSE-SU-2025:4423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-52434

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

SUSE-SU-2025:4488-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed modmd ACME unintended retry intervals bsc1254511 - CVE-2025-65082: Fixed CGI environment variable override bsc1254514 - CVE-2025-58098: Fixed Server Side Includes adding query string to exec cmd=... bsc1254512 -...

CVE-2025-64221

creationtimestamp| type| source ---|---|--- 2025-12-18 09:31:53+00:00| seen| https://gist.github.com/Darkcrai86/60dff2bdc60d38d2a1a34ebcc1a510e8...

CVE-2025-64188

Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through = 8.6.9...

CVE-2025-60180 WordPress WP Gravity Forms Salesforce plugin <= 1.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

CVE-2025-68432

creationtimestamp| type| source ---|---|--- 2025-12-18 01:31:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7zpqzonv2u 2025-12-18 03:04:21+00:00| seen| https://infosec.exchange/users/offseq/statuses/115738349369977264 2025-12-18 03:04:22+00:00| seen|...

CVE-2021-43163

creationtimestamp| type| source ---|---|--- 2025-12-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-12-18 2026-06-23 14:06:16+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81027123-38d0-4796-a9df-b0d9a6633a72 2026-06-30...

CVE-2025-34435

creationtimestamp| type| source ---|---|--- 2025-12-17 23:35:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7tag4nki2g...

@abovethefray/klaviyo-adobe-commerce-app-checkout-consent-dropin (>=0.0.1 <=1.0.0), @adobe-commerce/elsie (>=1.0.0 <=2.0.0-alpha-20260514091936) +111 more potentially affected by CVE-2025-68429 via @storybook/core-common (>=8.0.0-alpha.0 <=8.6.14)

@storybook/core-common NPM version =8.0.0-alpha.0, =0.0.1, =1.0.0, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =1.0.213-beta.38, =0.38.0, =0.41.1, =1.0.0, =0.1.0, =1.16.0, =4.18.0, =0.0.6, =1.1.1, =1.2.2 and more Source cves: CVE-2025-68429 Source advisory:...

31g-form-parser (>=1.0.1 <=1.0.126), @1024pix/storybook-ember (=7.1.1) +189 more potentially affected by CVE-2025-68429 via @storybook/core-common (>=7.0.0 <=7.6.20)

@storybook/core-common NPM version =7.0.0, =1.0.1, =0.0.18, =2.0.5, =1.1.1, =0.0.1, =0.0.4, =0.0.0-dev-main.202308160724, =0.0.0-dev-main.202307180716, =0.0.0-dev.main.0b9a477d, =24.10.0, =26.7.0-beta.15 and more Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOKCORECOMMON-14470053...

Insertion of Sensitive Information into Externally-Accessible File or Directory

Overview @storybook/core-common is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insertion of Sensitive Information into Externally-Accessible File or Directory via the storybook build command. An attacker can access sensitive environment variables by...

CLSA-2025-1765985737 libssh: Fix of 2 CVEs

CVE-2025-5351: fix double-free conditions - CVE-2025-8114: fix NULL pointer dereference...

BELL-CVE-2025-68318

Bulletin has no description...

BELL-CVE-2025-68183

Bulletin has no description...

CVE-2021-25082

creationtimestamp| type| source ---|---|--- 2025-12-17 02:07:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25082.yaml 2025-12-18 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36lkbax2f...

Fedora: Security Advisory (FEDORA-2025-0e41e63705)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...