14132 matches found
CVE-2025-0038
In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality...
Reemo Unveils Bastion+: A Scalable Solution for Global Privileged Access Management
Paris, France, 6th October 2025, CyberNewsWire...
CVE-2025-56019
An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy BLE without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect,...
Notepad++ DLL Hijacking Vulnerability (Oct 2025)
Notepad++ is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:notepad-plus-plus:notepad++"...
AMD Zynq UltraScale+ security vulnerabilities
AMD Zynq UltraScale+ is a multiprocessor system-on-chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Zynq UltraScale+ that stems from a lack of address validation when executing CSU runtime services, which could result in a loss of integrity and confidentiality...
Yaml-cpp Heap Buffer Overflow DoS
The vulnerability of the Token&Scanner::peek function in the scanner.cpp component of the YAML handling library for C++ Yaml-cpp is related to the insufficient use of the assert function. Exploiting this vulnerability may allow a remote attacker to cause a service failure...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
EUVD-2025-32423
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-8726: Improper Neutralization of Input During Web Page Generation
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
WordPress plugin WP Photo Album Plus has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
RockyLinux 9 : grub2 (RLSA-2025:6990)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:6990 advisory. grub2: reader/jpeg: Heap OOB Write during JPEG parsing CVE-2024-45774 grub2: commands/extcmd: Missing check for failed allocation CVE-2024-45775 grub2:...
WordPress WP Photo Album Plus plugin <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via wppauserupload vulnerability discovered by zer0gh0st in WordPress Plugin WP Photo Album Plus versions = 9.0.11.006...
EUVD-2023-34491
Malicious code in bioql PyPI...
EUVD-2025-4261
Malicious code in bioql PyPI...
EUVD-2022-30648
Malicious code in bioql PyPI...
EUVD-2023-45943
Malicious code in bioql PyPI...