12715 matches found
PT-2025-30129
Name of the Vulnerable Software and Affected Versions WP Mobile Detector versions up to and including 3.5 Description The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resize.php file. This allows unauthenticated attacke...
PT-2025-30084 · Agorum Software Gmbh · Agorum Core
Name of the Vulnerable Software and Affected Versions: agorum Software GmbH Agorum core open versions 11.9.2 and 11.10.1 Description: A Server-Side Request Forgery SSRF exists in the TunnelServlet component. This allows attackers to initiate connections to arbitrary internal and external resource...
openSUSE Security Advisory (SUSE-SU-2025:02336-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-29999 · WordPress · Woocommerce Refund/Exchange With Rma - Warranty Management
Name of the Vulnerable Software and Affected Versions: WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User Wallet versions up to and including 3.2.6 Description: The WooCommerce Refund And Exchange with RMA - Warranty Management, Refund Policy, Manage User...
PT-2025-30011 · Joomla · Articles Calendar
Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...
PT-2025-30026 · Unknown · Rsdirectory!
Name of the Vulnerable Software and Affected Versions: RSDirectory! component versions 1.0.0 through 2.2.8 Description: A stored cross-site scripting XSS issue exists in the RSDirectory! component. This allows remote authenticated attackers to inject arbitrary web script or HTML via the review...
CVE-2025-54064
CVE-2025-54064 affects Rucio helm charts for rucio-server, rucio-ui, and rucio-webui. The Apache access-log format includes the X-Rucio-Auth-Token header (which may contain Internal Rucio tokens or JWTs), potentially exposing credentials in log lines. Affected versions and patches: rucio-server 3...
CVE-2025-53928
MaxKB is an open-source AI assistant for enterprise. Prior to versions 1.10.9-lts and 2.0.0, a Remote Command Execution vulnerability exists in the MCP call. Versions 1.10.9-lts and 2.0.0 fix the issue...
RUSTSEC-2025-0045 ConstStaticCell could have been used to pass non-Send values to another thread
ConstStaticCell could have been used to pass non-Send values to another thread, because T was not required to be Send while ConstStaticCell is Send. This was corrected by introducing a T: Send bound...
RHSA-2025:11320 Red Hat Security Advisory: iputils security update
Bulletin has no description...
SUSE: Security Advisory (SUSE-SU-2025:02316-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-29906 · Unknown · Bluebird Devices
Name of the Vulnerable Software and Affected Versions: Bluebird devices version 1.4.4 Bluebird devices version 1.3.6 Description: Bluebird devices contain a pre-loaded file manager application that exposes an unsecured service provider com.bluebird.system.koreanpost.IsdcardRemoteService. A local...
PT-2025-30057 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.6 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the personalizacao.php endpoint...
PT-2025-29976
Name of the Vulnerable Software and Affected Versions Brocade ASCG versions prior to 3.3.0 Description Brocade ASCG versions prior to 3.3.0 log JSON Web Tokens JWT in log files. An attacker with access to these log files can extract the unencrypted tokens, potentially leading to unauthorized...
PT-2025-29930
Name of the Vulnerable Software and Affected Versions AdGuard versions prior to 1.11.22 Description The AdGuard plugin for Safari on MacOS excessively logged URLs accessed by Safari when the plugin was active. These logs were written to the MacOS general logs, accessible to any unsandboxed proces...
PT-2025-29951 · Unknown +1 · Robot Operating System +1
Name of the Vulnerable Software and Affected Versions: Robot Operating System ROS versions prior to Noetic Ninjemys Description: A code injection issue exists in the 'roslaunch' command-line tool due to the use of the eval method to process unsanitized parameter values within the substitution arg...
PT-2025-29905 · Blubird · Bluebird Devices
Name of the Vulnerable Software and Affected Versions: Bluebird devices versions prior to 1.1.2 Description: Bluebird devices contain a pre-loaded kiosk application that exposes an unsecured service provider, com.bluebird.kiosk.launcher.IpartnerKioskRemoteService. A local attacker can bind to the...
PT-2025-29959 · Lenovo · Lenovo Browser +3
Name of the Vulnerable Software and Affected Versions: Lenovo Protection Driver versions prior to 5.1.1110.4231 Description: A buffer overflow issue exists in the Lenovo Protection Driver, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store. A local attacker with elevated privileges c...
CVE-2025-53821
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the nextPage parameter, leading to an...