8638 matches found
CVE-2025-49441
Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida interactive-map-of-florida allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Interactive Regional Map of Florida: from n/a through = 1.0...
CVE-2025-49441
CVE-2025-49441 refers to a Missing Authorization vulnerability in the WordPress plugin “Interactive Regional Map of Florida.” The connected documents confirm: affected software is Interactive Regional Map of Florida (plugin), with version range up to 1.0; the issue is an access-control/configurat...
CVE-2025-49445
CVE-2025-49445 is a CSRF vulnerability in the WordPress plugin set for Interactive UK Regional Map. The advisory indicates the flaw affects versions up to 2.0; no root-cause, affected components, exploit details, or patch/remediation is provided in the initial or connected documents. The connecte...
CVE-2025-49449
CVE-2025-49449 describes a CSRF vulnerability in the Interactive Regional Map of Africa WordPress plugin (Interactive Regional Map of Africa / interactive-map-of-africa). The CVE scope indicates the affected product is the WordPress plugin and the issue is a CSRF flaw that could enable Cross-Site...
PT-2025-24267 · WordPress · Wp Map Plugins Interactive Uk Regional Map
Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive UK Regional Map versions n/a through 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Interactive UK Regional Map, allowing unauthorized actions to be performed on behalf of a user without their...
PT-2025-24269 · WordPress · Wp Map Plugins Interactive Regional Map Of Africa
Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive Regional Map of Africa versions 1.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Interactive Regional Map of Africa, allowing unauthorized actions to be performed on behalf of a user...
Ubuntu: Security Advisory (USN-7558-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-24264 · WordPress · Wp Map Plugins Interactive Regional Map Of Florida
Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive Regional Map of Florida versions 1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...
RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2025:8184)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8184 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a...
Important: Red Hat Security Advisory: Red Hat Developer Hub 1.5.2 release.
Red Hat Developer Hub 1.5.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
CVE-2025-5429
A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...
SUSE: Security Advisory (SUSE-SU-2025:01737-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-30626
Name of the Vulnerable Software and Affected Versions GStreamer versions through 1.26.1 Description The subrip unescape formatting function within the subparse plugin may dereference a NULL pointer during subtitle file parsing, resulting in a crash. Recommendations Update to a version beyond 1.26...
PT-2025-30625
Name of the Vulnerable Software and Affected Versions GStreamer versions through 1.26.1 Description The parse subrip time function within the subparse plugin may write data beyond the allocated buffer on the stack, potentially causing a crash. Recommendations Update GStreamer to a version later...
WordPress WordPress Comments Import & Export plugin <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jorgson in WordPress Plugin Comments Import & Export versions = 2.4.3...
CVE-2025-5429
Juzaweb CMS (versions up to 3.4.2) contains a vulnerability in the Plugins Page, specifically the /admin-cp/plugin/install endpoint. The issue is described as improper access controls that can be triggered remotely, enabling unauthorized access. Multiple connected sources corroborate the vulnerab...
CVE-2025-5429 juzaweb CMS Plugins Page install access control
A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...
Fedora: Security Advisory (FEDORA-2025-2a36564bd2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : gstreamer1-plugins-bad-free (2025-2a36564bd2)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2a36564bd2 advisory. backport fix for CVE-2025-3887 resolves rhbz2367919 Tenable has extracted the preceding description block directly from the Fedora security advisory...
