7430 matches found
[SECURITY] [DSA 6028-1] lxd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6028-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 17, 2025 https://www.debian.org/security/faq -...
[BSA-125] Security Update for incus
Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2025-54286 CVE-2025-54287 CVE-2025-54288 CVE-2025-54289 CVE-2025-54290 CVE-2025-54291 CVE-2025-54293 Multiple security issues were discovered in Incus, a system container and virtual machine...
[SECURITY] [DSA 6027-1] incus security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6027-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 17, 2025 https://www.debian.org/security/faq -...
EUVD-2025-34789
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure...
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
Impact Missing validation on input vulnerable to directory traversal. Patches The problem has been patched in versions: v4.4.1 for PrestaShop 1.7 build number: 7.4.4.1 v4.4.1 for PrestaShop 8 build number: 8.4.4.1 v5.0.5 for PrestaShop 1.7 build number: 7.5.0.5 v5.0.5 for PrestaShop 8 build numbe...
GHSA-FPXP-PFQM-X54W PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
Impact Missing validation on input vulnerable to directory traversal. Patches The problem has been patched in versions: v4.4.1 for PrestaShop 1.7 build number: 7.4.4.1 v4.4.1 for PrestaShop 8 build number: 8.4.4.1 v5.0.5 for PrestaShop 1.7 build number: 7.5.0.5 v5.0.5 for PrestaShop 8 build numbe...
CVE-2025-61923
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. N...
CVE-2025-61923
CVE-2025-61923 concerns PrestaShop Checkout (backoffice) where missing input validation enables a directory traversal and arbitrary file disclosure. Connected sources (Red Hat, NVD, OSV, Snyk, GHSA) confirm the affected component is the PrestaShop Checkout module; vulnerable versions are prior to...
CVE-2025-61923 PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. N...
CVE-2025-61923 PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. N...
CVE-2025-61923 PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. N...
CVE-2025-58051
Nextcloud Tables allows you to create your own tables with individual columns. Prior 0.7.6, 0.8.8, and 0.9.5, when importing a table, a user was able to specify files on the server and when their format is supported by the used PhpSpreadsheet library they would be included and their content leake...
PT-2025-42515
Name of the Vulnerable Software and Affected Versions PrestaShop Checkout versions prior to 4.4.1 and 5.0.5 Description The PrestaShop Checkout module is susceptible to a directory traversal and arbitrary file disclosure due to missing input validation in the backoffice. This allows unauthorized...
PrestaShop Checkout 路径遍历漏洞
PrestaShop Checkout is an open source checkout payment module from PrestaShopCorp. A path traversal vulnerability exists in PrestaShop Checkout versions prior to 4.4.1 and prior to 5.0.5, which stems from a lack of input validation in the backend, and could lead to directory traversal and arbitra...
Nextcloud Tables 安全漏洞
Nextcloud Tables is an open source tables application from Nextcloud. A security vulnerability exists in Nextcloud Tables versions prior to 0.7.6, prior to 0.8.8, and prior to 0.9.5, which stems from a server file that can be specified when importing a table, potentially leading to a disclosure o...
CVE-2025-61923: Improper Limitation of a Pathname to a Restricted Directory
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. N...
CVE-2025-59258
Insertion of sensitive information into log file in Active Directory Federation Services allows an unauthorized attacker to disclose information locally...
CVE-2025-11371
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...