iocharger security vulnerability

iocharger is an electric vehicle charging and smart energy management solution from the Chinese company Galaxy Zhangtan iocharger. A security vulnerability exists in iocharger versions prior to 24120701, which stems from an unsatisfactory neutralization of a special element used in a command, whi...

iocharger security vulnerability

iocharger is an electric vehicle charging and smart energy management solution from the Chinese company Galaxy Zhangtan iocharger. A security vulnerability exists in iocharger versions prior to 24120701, which stems from an unsatisfactory neutralization of a special element used in a command, whi...

PRIMX ZED security vulnerabilities

PRIMX ZED is a suite of sensitive data encryption software from PRIMX Corporation. A security vulnerability exists in PRIMX ZED Enterprise version 2024.3 and prior versions. An attacker could exploit the vulnerability to manipulate technical files stored in a local folder with normal user access...

Drupal code-related vulnerabilities

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Monster Menus prior to version 9.3.4, versions 9.4.0 through 9.4.2, which stems from the inclusion of an untrusted data deserialization vulnerability...

Drupal security vulnerabilities

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Diff prior to version 1.8.0, which stems from the inclusion of an authorization error vulnerability...

PT-2025-3063

Name of the Vulnerable Software and Affected Versions PHPYun versions prior to 7.0.2 Description The issue allows for code execution through backdoor-restricted arbitrary file writing and file inclusion. Recommendations For versions prior to 7.0.2, update to version 7.0.2 or later to resolve the...

SUSE CVE-2025-0240

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...

Soft Serve path traversal vulnerability

Soft Serve is a self-hostable command-line Git server from Charm Open Source. A path traversal vulnerability exists in Soft Serve versions prior to 0.8.2, which stems from vulnerability to a path traversal attack that allows an existing non-administrative user to access and take over another user...

CVE-2024-47398

in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write...

CVE-2025-22395

Dell Update Package Framework, versions prior to 22.01.02, contains a Local Privilege Escalation Vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary remote scripts on the server. Exploitation may lead to a denial of...

WordPress plugin Highlight: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin jQuery TwentyTwenty has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Video Embed Optimizer has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Virtual Bot has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

LibreOffice path traversal vulnerability

LibreOffice is an open source office software suite from The Document Foundation. A path traversal vulnerability exists in LibreOffice versions prior to 24.8 through 24.8.4 that stems from a path traversal error and allows an attacker to write to an arbitrary location via a file in a specific...

WordPress Plugin Store Commerce Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Simple Photo Sphere has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin 1003 Mortgage Application has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-3233 · WordPress · Wp Securesubmit

Name of the Vulnerable Software and Affected Versions: WP SecureSubmit versions prior to 1.5.17 Description: The issue is related to a missing authorization vulnerability in WP SecureSubmit. This problem affects WP SecureSubmit versions prior to 1.5.17. Recommendations: For versions prior to...

Mozilla Firefox < 134.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 134.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-01 advisory. - Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory...