CVE-2025-30215 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter, nats-top, nats-server-fips, nats-top-fips, nats-server...

PT-2025-29582

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The software is susceptible to a heap-buffer-overflow read issue. The crash occurs during the Assimp::SceneCombiner::CopyScene function, which is called within Assimp::Exporter::Export and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4748722238193664 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x502000000111 Crash Stat...

CVE-2025-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3. A patched version of the package is available...

CVE-2025-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-32539 WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

CVE-2025-32539 WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach WooCommerce – Store Exporter allows Reflected XSS. This issue affects WooCommerce – Store Exporter: from n/a through 2.7.4...

CVE-2025-32539

CVE-2025-32539 is a Reflected Cross-Site Scripting vulnerability in WooCommerce – Store Exporter (store-exporter) for versions up to 2.7.4. The issue is publicly tracked with a CVSS v3.1 base score of 7.1 (HIGH), attack vector NETWORK, requires user interaction, and has CHANGED scope with low con...

WordPress plugin WooCommerce – Store Exporter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-32539: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through = 2.7.4...

PT-2025-16063 · Woocommerce · Woocommerce – Store Exporter

Name of the Vulnerable Software and Affected Versions: WooCommerce – Store Exporter versions 2.7.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-haproxy, wireguard-go, cni-plugins, controller-gen, flannel-cni-plugin, terraform-provider-sendgrid, caddy, grafana-agent-operator, bazelisk, nri-mongodb, buildkitd, checksec, multus-cni, gitness, shfmt, kind, paranoia, flux-image-automation-controller,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: nri-haproxy, wireguard-go, cni-plugins, controller-gen, flannel-cni-plugin, terraform-provider-sendgrid, caddy, grafana-agent-operator, bazelisk, nri-mongodb, buildkitd, checksec, multus-cni, gitness, shfmt, kind, paranoia, flux-image-automation-controller,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: ini-file-fips, cert-manager-cmctl-fips, kube-rbac-proxy-fips, go-licenses, kube-logging-operator, kafkaexporter, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, flux-helm-controller, ip-masq-agent, terraform-provider-kubernetes, cert-manager-fips,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: ini-file-fips, cert-manager-cmctl-fips, kube-rbac-proxy-fips, go-licenses, kube-logging-operator, kafkaexporter, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, flux-helm-controller, ip-masq-agent, terraform-provider-kubernetes, cert-manager-fips,...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-32251 WordPress Jetpack Feedback Exporter <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter allows Retrieve Embedded Sensitive Data. This issue affects Jetpack Feedback Exporter: from n/a through 1.23...

CVE-2025-32251

CVE-2025-32251 concerns the Jetpack Feedback Exporter WordPress plugin. The entry states an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability that could allow Retrieve Embedded Sensitive Data, affecting Jetpack Feedback Exporter versions up to 1.23. CVSS 3.1...