CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...

GHSA-FHG8-QXH5-7Q3W vulnerabilities

Vulnerabilities for packages: nats-server, nats-top-fips, nats-server-fips, prometheus-nats-exporter, nats-top...

CVE-2025-30215 vulnerabilities

Vulnerabilities for packages: nats-server, nats-top-fips, nats-server-fips, prometheus-nats-exporter, nats-top...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4748722238193664 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x502000000111 Crash Stat...

CVE-2025-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3. A patched version of the package is available...

CVE-2025-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-32539 WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-32539

CVE-2025-32539 is a Reflected Cross-Site Scripting vulnerability in WooCommerce – Store Exporter (store-exporter) for versions up to 2.7.4. The issue is publicly tracked with a CVSS v3.1 base score of 7.1 (HIGH), attack vector NETWORK, requires user interaction, and has CHANGED scope with low con...

CVE-2025-32539 WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach WooCommerce – Store Exporter allows Reflected XSS. This issue affects WooCommerce – Store Exporter: from n/a through 2.7.4...

CVE-2025-32539: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

PT-2025-16063 · Woocommerce · Woocommerce – Store Exporter

Name of the Vulnerable Software and Affected Versions: WooCommerce – Store Exporter versions 2.7.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

WordPress plugin WooCommerce – Store Exporter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: thanos-operator, malcontent, helm-push, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, amazon-k8s-cni, octo-sts, azcopy, esbuild, hey, gomplate, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit, prometheus-adapte...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: thanos-operator, malcontent, helm-push, kubernetes-csi-external-provisioner, velero, nri-rabbitmq, fulcio, amazon-k8s-cni, octo-sts, azcopy, esbuild, hey, gomplate, gke-gcloud-auth-plugin, kyverno-policy-reporter-kyverno-plugin, litefs, rootlesskit, prometheus-adapte...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, knative-operator, opencost-fips, azure-service-operator, kserve-modelmesh-serving, harbor-registry, cargobump, cilium, sbom-convert, cadvisor, clickhouse-operator-fips, incert, node-problem-detector, openbao-k8s-fips, argo-cd,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch-fips, knative-operator, opencost-fips, azure-service-operator, kserve-modelmesh-serving, harbor-registry, cargobump, cilium, sbom-convert, cadvisor, clickhouse-operator-fips, incert, node-problem-detector, openbao-k8s-fips, argo-cd,...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251 WordPress Jetpack Feedback Exporter <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter allows Retrieve Embedded Sensitive Data. This issue affects Jetpack Feedback Exporter: from n/a through 1.23...