CVE-2025-5423 juzaweb CMS General Setting Page general access control

A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...

CVE-2025-5423 juzaweb CMS General Setting Page general access control

A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...

CVE-2025-5423

Juzaweb CMS up to version 3.4.2 has a vulnerability in the General Setting Page at /admin-cp/setting/system/general. The issue is improper access controls, enabling remote exploitation and is publicly disclosed. Vendor did not respond. As a temporary mitigation, PT-2025-23446 recommends restricti...

Juzaweb CMS 安全漏洞

Juzaweb CMS is a content management system developed by Juzaweb Individual Developer based on the Laravel framework and Web platform. A security vulnerability exists in Juzaweb CMS 3.4.2 and earlier versions, which stems from improper access control in the file /admin-cp/setting/system/general...

CVE-2025-5423: Improper Access Control

A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...

OPENSUSE-SU-2025:15193-1 golang-github-teddysun-v2ray-plugin-5.25.0-1.1 on GA media

These are all security issues fixed in the golang-github-teddysun-v2ray-plugin-5.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15192-1 python39-3.9.22-3.1 on GA media

These are all security issues fixed in the python39-3.9.22-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15190-1 python310-3.10.17-4.1 on GA media

These are all security issues fixed in the python310-3.10.17-4.1 package on the GA media of openSUSE Tumbleweed...

Vulnerability of the Server:Options component of the Oracle MySQL Server database management system and the Cluster:General component of the MySQL Cluster database management system, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Server:Options component of the Oracle MySQL Server database management system and the Cluster:General component of the MySQL Cluster database management system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can...

OPENSUSE-SU-2025:15188-1 govulncheck-vulndb-0.0.20250529T205903-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250529T205903-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15189-1 libsoup-2_4-1-2.74.3-11.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-11.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15175-1 apache-commons-beanutils-1.11.0-1.1 on GA media

These are all security issues fixed in the apache-commons-beanutils-1.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15174-1 MozillaThunderbird-128.11.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15182-1 nodejs-electron-35.5.0-1.1 on GA media

These are all security issues fixed in the nodejs-electron-35.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15179-1 govulncheck-vulndb-0.0.20250527T204717-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250527T204717-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15177-1 ffmpeg-7-7.1.1-4.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15180-1 icinga2-2.14.6-1.1 on GA media

These are all security issues fixed in the icinga2-2.14.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15183-1 libopenssl-3-devel-3.5.0-3.1 on GA media

These are all security issues fixed in the libopenssl-3-devel-3.5.0-3.1 package on the GA media of openSUSE Tumbleweed...

DRUPAL-CONTRIB-2025-072

This module addresses the General Data Protection Regulation GDPR and the EU Directive on Privacy and Electronic Communications. The module doesn't sufficiently verify whether "disabled JavaScript" entries are valid or correspond to actual scripts on the page. As a result, an attacker could injec...

Drupal EU Cookie Compliance (GDPR Compliance) module < 1.26.0 - Authenticated Cross Site Scripting (XSS) vulnerability

Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module EU Cookie Compliance GDPR Compliance versions 1.26.0...