12714 matches found
PT-2025-21419 · WordPress · Ahathat Plugin
Name of the Vulnerable Software and Affected Versions: AHAthat Plugin WordPress plugin versions 1.6 and earlier Description: The issue allows Admin to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before using it in a SQL statement. Recommendations: For...
PT-2025-21517 · Unknown · Download Manager
Name of the Vulnerable Software and Affected Versions: Download Manager versions prior to 3.2.99 Description: The issue allows high privilege users, such as editors, to perform Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escaped, enabling th...
PT-2025-21399 · WordPress · Rbs Image Gallery
Name of the Vulnerable Software and Affected Versions: Rbs Image Gallery WordPress plugin versions prior to 3.2.22 Description: The issue concerns the Rbs Image Gallery WordPress plugin, where some settings are not properly sanitized and escaped, potentially allowing high-privilege users, such as...
PT-2025-21464 · WordPress · Podlove Podcast Publisher
Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher WordPress plugin versions prior to 4.2.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...
PT-2025-21487 · WordPress · Profilepro
Name of the Vulnerable Software and Affected Versions: ProfilePro WordPress plugin versions 1.3 and earlier Description: The issue concerns a lack of proper sanitization and escaping of certain parameters, combined with inadequate access controls. This could potentially allow users with a role as...
PT-2025-21358 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.4.0.0 through 9.9.0.0 Description: The issue is related to an uncontrolled resource consumption vulnerability. A remote unprivileged attacker could potentially exploit this, leading to denial of service...
PT-2025-21528 · WordPress · 10Web Photo Gallery
Name of the Vulnerable Software and Affected Versions: Photo Gallery by 10Web for WordPress versions prior to 1.8.29 Description: The issue allows high-privilege users, such as administrators, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability ...
PT-2025-21422 · WordPress · Planning Center Online Giving
Name of the Vulnerable Software and Affected Versions: The Planning Center Online Giving WordPress plugin versions 1.0.0 and earlier Description: The issue concerns a lack of validation and escaping of certain shortcode attributes, which could allow users with the contributor role and above to...
PT-2025-21268 · Hitachi · Hitachi Jp1/It Desktop Management 2 - Smart Device Manager
Name of the Vulnerable Software and Affected Versions: Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 10-50 through 10-50-06 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager versions 11-00 through 11-00-05 Hitachi JP1/IT Desktop Management 2 - Smart Device Manager...
PT-2025-21274 · Mattermost · Mattermost
Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.6.x through 10.6.1 Mattermost versions 10.5.x through 10.5.2 Mattermost versions 10.4.x through 10.4.4 Mattermost versions 9.11.x through 9.11.11 Description: The issue arises from incorrect permission checks, allowing...
SUSE-SU-2025:1551-1 Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.3 bsc1236217: Security fixes: - CVE-2025-22873: Fixed os.Root permits access to parent directory bsc1242715 Changelog: go73556 go73555 security: fix CVE-2025-22873 os: Root permits access to parent directory go73082 os: Root.Open...
AZL-61829 CVE-2025-47436 affecting package orc 0.4.31-4
Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted malformed ORC files can cause the decompressor to allocate a 250-byte buffer but then attempts to copy 295 bytes into it. It causes memory...
RHSA-2025:7532 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
RHSA-2025:7510 Red Hat Security Advisory: libarchive security update
Bulletin has no description...
RHSA-2025:7500 Red Hat Security Advisory: perl security update
Bulletin has no description...
RHSA-2025:7499 Red Hat Security Advisory: ghostscript security update
Bulletin has no description...
RHSA-2025:7475 Red Hat Security Advisory: grafana security update
Bulletin has no description...
RHSA-2025:7457 Red Hat Security Advisory: exiv2 security update
Bulletin has no description...