CVE-2017-10114 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2017-3262 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2024-54534 vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-3GGQ-P922-54QP vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-3M56-MH77-C3GC vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-3CGJ-V3M4-CGCQ vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

GHSA-4CJW-Q36G-5WCH vulnerabilities

Vulnerabilities for packages: openjdk-11-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9...

CVE-2025-8023

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file...

CVE-2025-55746

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents without changes being applied to the files'...

CVE-2025-38638

In the Linux kernel, the following vulnerability has been resolved: ipv6: add a retry logic in net6rtnotify inet6rtnotify can be called under RCU protection only. This means the route could be changed concurrently and rt6fillnode could return -EMSGSIZE. Re-size the skb when this happens and retry...

CVE-2025-38651

Summary: CVE-2025-38651 concerns the Linux kernel landlock component. A bug in get_id_range() could receive a non-positive value because get_random_u8() may return 0, triggering an unsafe first argument. The fix clamps the value to ensure positivity. The vulnerability was discussed in kernel-land...

CVE-2025-38651

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix warning from KUnit tests getidrange expects a positive value as first argument but getrandomu8 can return 0. Fix this by clamping it. Validated by running the test in a for loop for 1000 times. Note that MAX is wron...

WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Recurring PayPal Donations versions = 1.8...

WordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Jobmonster versions = 4.8.0...

WordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Jobmonster versions = 4.8.0...

CVE-2025-54174

QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious article with content defined by the attacker. The vendor was notified...

CVE-2025-54172

QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. Regular admin user is not able to inject any JS scripts into th...

WordPress Heart theme <= 1.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Heart versions = 1.8...

CVE-2025-57888

CVE-2025-57888 is a WordPress Jobmonster theme vulnerability (NooTheme) reported to affect versions up to 4.8.0. The issue exposes sensitive system information to an unauthorized control sphere, potentially enabling data leakage. Multiple sources (NVD, CVE lists, Patchstack, Red Hat advisory) cor...

CVE-2025-57887

CVE-2025-57887 describes a stored cross-site scripting vulnerability in the NooTheme Jobmonster WordPress theme, affecting versions up to 4.8.0. The root cause is improper neutralization of input during web page generation, enabling injection of malicious scripts into pages (Stored XSS). The CVE’...