18880 matches found
CVE-2023-43037 IBM Maximo Application Suite improper access control
IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation...
GitLab Enterprise Edition（EE） 安全漏洞
GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition EE that originates from an attacker being able to perform sensitive keyword searches. The following products and versions are affected:...
GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...
CVE-2025-21595
A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause an FPC to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...
CVE-2025-32479 WordPress Flags Widget plugin <= 1.0.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in ab-tools Flags Widget flags-widget allows Stored XSS.This issue affects Flags Widget: from n/a through = 1.0.7...
PT-2025-15814 · WordPress · Wp Map Plugins Interactive Us Map
Name of the Vulnerable Software and Affected Versions: WP Map Plugins Interactive US Map versions n/a through 2.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in WP Map Plugins Interactive US Map. Recommendations: For versions n/a through 2.7,...
CVE-2025-22459
Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to intercept limited traffic between clients and servers...
CVE-2025-22458
DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System...
CVE-2025-2883
CVE-2025-2883 affects the WordPress plugin Accept SagePay Payments Using Contact Form 7. Exposed phpinfo.php in all versions up to 2.0 can leak potentially sensitive information publicly; exploitation would be unauthenticated. Wordfence lists this CVE as patched in its monitoring, and connected s...
CVE-2025-3436
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...
April 8, 2025-KB5055681 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019
None None...
Elastic Elasticsearch 资源管理错误漏洞
Elastic Elasticsearch is a search engine based on the Lucene library from the Dutch company Elastic. A resource management error vulnerability exists in Elastic Elasticsearch versions 7.17.0 through 7.17.23 and 8.0.0 through 8.15.0, which stems from a recursive issue when processing format string...
WordPress plugin Accept SagePay Payments Using Contact Form 7 信息泄露漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress plugin Accept...
Elastic Elasticsearch 资源管理错误漏洞
Elastic Elasticsearch is a search engine based on the Lucene library from the Dutch company Elastic. A resource management error vulnerability exists in Elastic Elasticsearch versions 7.17.0 through 8.15.0, which stems from a recursive flaw in the handling of the innerForbidCircularReferences...
CVE-2025-32195
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Stored XSS.This issue affects Ecwid Shopping Cart: from n/a through = 7.0...
AZL-59586 CVE-2025-29477 affecting package fluent-bit 3.1.10-7
An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consumeevent...
CVE-2025-32181 WordPress Search, Filters & Merchandising for WooCommerce plugin <= 3.0.57 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fast Simon Search, Filters & Merchandising for WooCommerce allows Stored XSS. This issue affects Search, Filters & Merchandising for WooCommerce: from n/a through 3.0.57...
CVE-2025-32127 WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows SQL Injection.This issue affects onOffice for WP-Websites: from n/a through = 5.7...
WordPress plugin Rollbar 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...