CVE-2025-24665 WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injection.This issue affects Small Package Quotes – Unishippers Edition: from n/a...

CVE-2025-24665

CVE-2025-24665 is a SQL Injection in WordPress Small Package Quotes – Unishippers Edition (affected versions up to 2.4.8). Root cause: improper neutralization of SQL elements. Impact: potential unauthorized DB access or data exposure. Remediation: upgrade to a version later than 2.4.8 (patch/miti...

CVE-2025-24389

Certain errors of the upstream libraries will insert sensitive information in the OTRS or OTRS Community Edition log mechanism and mails send to the system administrator. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS...

CVE-2024-43446

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2024-43445

A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...

CVE-2025-24389

CVE-2025-24389 affects OTRS and related builds (OTRS 7.0.X, 8.0.X, 2023.X, 2024.X and ((OTRS)) Community Edition 6.0.x; products based on CE are likely affected). The root cause is described as certain errors in upstream libraries that cause sensitive information to be written to the OTRS log mec...

CVE-2025-24389 SMTP Password will be shown in cleartext on some SMTP errors

Certain errors of the upstream libraries will insert sensitive information in the OTRS or OTRS Community Edition log mechanism and mails send to the system administrator. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS...

CVE-2024-43446

CVE-2024-43446 affects OTRS: improper privilege management in the Generic Interface module allows users with read-only privileges to change ticket status. Impacted: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and ((OTRS)) Community Edition 6.0.x (and products built on it). Root cause: insufficient access c...

CVE-2024-43446 Improper check of permissions in Generic Interface

An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS Community Edition...

CVE-2024-43445

CVE-2024-43445 affects OTRS and OTRS Community Edition, where HTTP responses may omit the X-Content-Type-Options: nosniff header. This allows MIME type confusion when uploading or inserting content. Affected: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and OTRS Community Edition 6.0.x (and related products...

PT-2025-5485 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology LTL Freight Quotes – Worldwide Express Edition versions 5.0.20 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL injection. This means an...

PT-2025-5486 · Enituretechnology · Eniture Technology Small Package Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Unishippers Edition versions 2.4.8 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This enables unauthorize...

PT-2025-5354 · Unknown +1 · Otrs Community Edition +1

Name of the Vulnerable Software and Affected Versions: OTRS versions 7.0.X through 2024.X OTRS Community Edition version 6.0.x Description: Certain errors of the upstream libraries will insert sensitive information in the log mechanism and mails sent to the system administrator. Products based on...

WordPress plugin Small Package Quotes – Worldwide Express Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress plugin...

WordPress plugin Small Package Quotes – Unishippers Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2025-5488 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Worldwide Express Edition versions 5.2.17 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This means an...

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A cross-site scripting vulnerability exists in GitLab CE/EE, which stems from...

PT-2025-1718 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 17.0 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.2 GitLab CE/EE versions 17.8 through 17.8.0 Description: An issue has been discovered in GitLab CE/EE that affects users with a developer role, allowing them to...

openjdk: Enhance array handling (Oracle CPU 2025-01)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can be...

DEBIAN-CVE-2025-21502

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Orac...