CGA-5CMV-P4Q2-J7PJ

Bulletin has no description...

Improper Neutralization

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Improper Neutralization in the email validation component. An attacker can intercept sensitive authentication emails by submitting a specially crafted email address that manipulates the parsing...

CVE-2025-64296 WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability

Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Facebook for WooCommerce: from n/a through = 3.5.7...

CVE-2025-64296 WordPress Facebook for WooCommerce plugin <= 3.5.7 - Broken Access Control to Notice Dismissal vulnerability

Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Facebook for WooCommerce: from n/a through 3.5.7...

PT-2025-43991

Name of the Vulnerable Software and Affected Versions code-projects Simple Food Ordering System version 1.0 Description A security issue exists in code-projects Simple Food Ordering System 1.0. The issue is related to cross site scripting, which can be triggered by manipulating the pname argument...

CVE-2025-11269

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

PT-2025-43705

Name of the Vulnerable Software and Affected Versions Product Filter by WBW versions up to and including 3.0.0 Description The Product Filter by WBW plugin for WordPress has a flaw where data can be modified without authorization. This is due to a missing capability check on the 'approveNotice'...

CVE-2025-10874: Server-Side Request Forgery (SSRF)

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user m...

Ubuntu: Security Advisory (USN-7839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper Authentication

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authentication via improper validation for MFA enforcement. An attacker can gain unauthorized access to user accounts by bypassing multi-factor authentication using valid credentials...

Ubuntu: Security Advisory (USN-7831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2025-5.0-0652

Updates of 'bindutils' packages of Photon OS have been released...

CVE-2025-62590

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-53063

...

CVE-2025-53060

CVE-2025-53060 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) with affected versions 9.2.0.0–9.2.9.4. Connected advisory confirms unauthenticated, network-accessible HTTP access can compromise Tools, with potential unauthorized update/insert/delete and read access to a subset of ...

CVE-2025-50074

CVE-2025-50074 affects Oracle Financial Services Revenue Management and Billing (component: Security Management System) in versions 2.9.0.0.0 through 7.2.0.0.0. The vulnerability allows a high-privilege attacker with network access over HTTP to obtain unauthorized access to sensitive data or full...

WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Cookie Notice & Compliance for GDPR / CCPA versions = 2.5.8...

Important: Red Hat Enhancement Advisory: OpenShift Container Platform 4.20.z packages update

Red Hat OpenShift Container Platform release 4.20.z is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

Custom HTTP Header Detected

This is an informational notice that the scanner was able to detect custom HTTP headers in the target application's responses. No source data...

WordPress Oceanpayment CreditCard Gateway plugin Access Control Error Vulnerability

WordPress Oceanpayment CreditCard Gateway plugin is a plugin for integrating credit card payments in your WordPress website, which enables transactions through the payment gateway provided by Oceanpayment. The WordPress Oceanpayment CreditCard Gateway plugin suffers from an Access Control Error...