CVE-2025-30624

CVE-2025-30624 (WordLift) is a Missing Authorization vulnerability in the WordLift WordLift WordPress plugin. The issue stems from incorrectly configured access control security levels. Affected versions are from n/a through 3.54.4. CVSS v3.1 base score is 4.3 (Medium) with vectors AV:N/AC:L/PR:L...

CVE-2025-30945

CVE-2025-30945 — Affected: Taskbuilder (WordPress plugin)

CVE-2025-30978

CVE-2025-30978 : Missing Authorization in the Slack Notifications by dorzki WordPress plugin (versions from n/a to 2.0.7) due to incorrectly configured access control levels. The vulnerability has a CVSS v3.1 base score of 4.3 (Medium) with network attack vector and low privilege/complexity requi...

CVE-2025-49287

CVE-2025-49287 : A Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce affects Product Feed for WooCommerce (Google Shopping Feed, Pinterest Feed, TikTok Ads & More) up to version 2.2.8. The CVSSv3.1 base score is 4.3 (Medium); attack vector is network, with low attack c...

CVE-2025-49283 WordPress Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant allows Cross Site Request Forgery. This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant: from n/a through 4.1.1...

CVE-2025-5541

CVE-2025-5541 (Runners Log, WordPress) Stored XSS vulnerability in the Runners Log plugin (shortcode runnerslog) is present in all versions up to 3.9.2 due to insufficient input sanitization and output escaping of user-supplied attributes. It allows authenticated attackers with contributor-level ...

Mattermost Server 9.11.x < 9.11.13 / 10.5.x < 10.5.4 / 10.7.x < 10.7.1 Multiple Vulnerabilities (MMSA-2025-00457, MMSA-2025-00462)

The version of Mattermost Server installed on the remote host is prior to 9.11.13, 10.5.4, or 10.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the MMSA-2025-00457 and MMSA-2025-00462 advisories. - Mattermost versions 10.7.x = 10.7.0, 10.5.x = 10.5.3, 9.11.x = 9.11.1...

PT-2025-24021 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns uncontrolled system resource applications in the setting module. Successful exploitation may affect availability. Recommendations: At the moment, there is no information...

Mattermost Server 9.11.x < 9.11.13 / 10.5.x < 10.5.4 / 10.6.x < 10.6.3 / 10.7.1 Multiple Vulnerabilities (MMSA-2025-00458, MMSA-2025-00463, MMSA-2025-00467)

The version of Mattermost Server installed on the remote host is prior to 9.11.13, 10.5.4, 10.6.3, or 10.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the MMSA-2025-00458, MMSA-2025-00463, MMSA-2025-00467 advisories. - Mattermost versions 10.7.x = 10.7.0, 10.6.x =...

CVE-2025-27754

CVE-2025-27754 : A stored XSS flaw affects RSBlog! component for Joomla, versions 1.11.6–1.14.4. The root cause is insufficient input cleanup, allowing an authenticated user to inject JavaScript into the plugin’s resource; the payload is stored and later executed when other users view the affecte...

CVE-2025-5644

A flaw was found in the radiff2 component of Radare2. This vulnerability allows a local attacker to cause a use-after-free condition via manipulation of the experimental -T parameter in the rconsflush function. Mitigation Mitigation for this issue is either not available or the currently availabl...

USN-7550-5 linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; CVE-2024-56608, CVE-2024-56551, CVE-2024-53168...

USN-7550-5: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Sun RPC protocol; CVE-2024-56608, CVE-2024-56551, CVE-2024-53168...

CVE-2025-49466

A flaw was found in aerc. The open.go file in the commands/msgview directory improperly concatenates attachment names, leading to a directory traversal vulnerability. This flaw allows a network attacker to specify a crafted attachment name. This issue allows arbitrary file access on the system...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.23-i586-1slack15.0.txz: Upgraded. This update fixes security issues: gh-135034: CVE-2024-12718 CVE-2025-4138 CVE-2025-433...

RHEL 10 : thunderbird (RHSA-2025:7507)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7507 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachme...

RHEL 10 : firefox (RHSA-2025:7506)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7506 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-7554-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7554-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

RHEL 9 : thunderbird (RHSA-2025:8599)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:8599 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Out-of-bounds access when resolving...

Ubuntu: Security Advisory (USN-7554-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...