12715 matches found
PT-2025-27227
Name of the Vulnerable Software and Affected Versions: Devnex Addons For Elementor versions 1.0.9 and earlier Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP...
PT-2025-27153 · Cookiebot · Cookiebot
Name of the Vulnerable Software and Affected Versions: Cookiebot versions through 4.5.8 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks a user...
PT-2025-27046 · Unknown · Neacsafe64 Driver +1
Name of the Vulnerable Software and Affected Versions: NeacSafe64 Driver versions prior to 1.0.0.8 Description: The issue allows attackers to escalate privileges by sending crafted IOCTL commands to the NeacSafe64.sys component. Recommendations: For versions prior to 1.0.0.8, update to version...
PT-2025-27035
Name of the Vulnerable Software and Affected Versions: Flock Safety Gunshot Detection devices versions prior to 1.3 Description: The issue concerns an on-chip debug interface with improper access control in Flock Safety Gunshot Detection devices. Recommendations: For versions prior to 1.3, update...
PT-2025-27085 · Unknown · Thhake Photo Express For Google
Name of the Vulnerable Software and Affected Versions: thhake Photo Express for Google versions 0.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
PT-2025-27188 · WordPress · Category Slider For Woocommerce
Name of the Vulnerable Software and Affected Versions: WPB Category Slider for WooCommerce versions 1.71 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local...
PT-2025-27114 · Unknown · Flexo Counter
Name of the Vulnerable Software and Affected Versions: Flexo Counter versions 1.0001 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-27088
Name of the Vulnerable Software and Affected Versions: Backwp versions n/a through 2.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a through 2.0.2,...
PT-2025-27101
Name of the Vulnerable Software and Affected Versions: ThemeMove Amely versions n/a through 3.1.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations:...
PT-2025-27174 · Unknown · Hide Admin Bar From Front End
Name of the Vulnerable Software and Affected Versions: Hide Admin Bar From Front End versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where a...
PT-2025-27111 · Greenmart · Greenmart
Name of the Vulnerable Software and Affected Versions: Greenmart versions n/a through 4.2.3 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion in themba...
CVE-2025-52902 File Browser has Stored Cross-Site Scripting vulnerability
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The Markdown preview function of File Browser prior to v2.33.7 is vulnerable to Stored Cross-Site-Scripting XSS. Any JavaScript code that is part of a...
Security Bulletin: IBM QRadar Hub for IBM QRadar SIEM is vulnerable to using a component with known vulnerabilities (CVE-2025-27152)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Hub for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-27152 DESCRIPTION: axios is a promise based HTTP clien...
RHSA-2025:9741 Red Hat Security Advisory: perl-File-Find-Rule security update
Bulletin has no description...
RHSA-2025:9696 Red Hat Security Advisory: apache-commons-beanutils security update
Bulletin has no description...
RHSA-2025:9640 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2025:9637 Red Hat Security Advisory: weldr-client security update
Bulletin has no description...
RHSA-2025:9635 Red Hat Security Advisory: weldr-client security update
Bulletin has no description...
Multiple vulnerabilities in iroha Board
Overview iroha Board provided by iroha Soft Co., Ltd. contains multiple vulnerabilities listed below. Forced browsing CWE-425 - CVE-2025-41404 Cross-site request forgery CWE-352 - CVE-2025-48497 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC...
JVN#09924566: Denial-of-service (DoS) vulnerabilities in multiple Apache products
Multiple Apache products provided by The Apache Software Foundation contain vulnerabilities listed below. Allocation of resources without limits or throttling CWE-770 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Base Score 6.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Base...