12570 matches found
WordPress FancyBox for WordPress plugin < 3.3.6 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Pierre Rudloff, Marc Montpas in WordPress Plugin FancyBox for WordPress versions 3.3.6...
RHSA-2025:8427 Red Hat Security Advisory: pandoc security update
Bulletin has no description...
RHSA-2025:8411 Red Hat Security Advisory: krb5 security update
Bulletin has no description...
RHSA-2025:8391 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Universal Video Player versions = 3.8.3...
PT-2025-23649 · Unknown · Webpack-Dev-Server
Name of the Vulnerable Software and Affected Versions: webpack-dev-server versions prior to 5.2.1 Description: The issue allows an attacker to obtain source code via a method similar to that used to exploit a previously reported vulnerability. This is possible because webpack-dev-server always...
SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2025:01456-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01456-1 advisory. - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function bsc1241020 - CVE-2025-29088:...
PT-2025-23620 · Dell · Dell Encryption Admin Utilities
Name of the Vulnerable Software and Affected Versions: Dell Encryption Admin Utilities versions prior to 11.10.2 Description: The issue is related to an Improper Link Resolution, which could be exploited by a local malicious user, potentially leading to privilege escalation. Recommendations: For...
JVN#05562338: Improper file access permission settings in PC Time Tracer
PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Base Score 7.3 CVE-2025-46355 Impact Arbitrary...
PT-2025-23635 · Ibm · Ibm Cloud Pak For Security +1
Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue allows an authenticated user to cause a denial of service due to improperly validating API dat...
PT-2025-23628 · Ibm · Ibm Cloud Pak For Security +1
Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue arises because the software does not invalidate a session after a user logs out, potentially...
RHSA-2025:8347 Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, and kpatch-patch-4_18_0-372_91_1 security update
Bulletin has no description...
PT-2025-27467 · Akamai · Akamai Cloudtest
Name of the Vulnerable Software and Affected Versions: Akamai CloudTest versions prior to 60 2025.06.02 12988 Description: Akamai CloudTest is susceptible to an XML External Entity XXE injection flaw. This allows for file inclusion by manipulating XML input, potentially leading to unauthorized...
PT-2025-23536 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...
ALSA-2025:8337 Important: varnish security update
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fixes: varnish: request smuggling attacks CVE-2025-47905 For more details about the...
PT-2025-23537
Name of the Vulnerable Software and Affected Versions SignXML versions prior to 4.0.4 Description The issue concerns a potential algorithm confusion attack when verifying signatures with X509 certificate validation turned off and HMAC shared secret set. This could allow an attacker to supply a...
PT-2025-23511 · Solarwinds · Solarwinds Dameware Mini Remote Control
Name of the Vulnerable Software and Affected Versions: SolarWinds Dameware Mini Remote Control versions prior to 12.3.2 Description: The issue is related to incorrect permissions in the SolarWinds Dameware Mini Remote Control Service, which can allow an attacker to escalate privileges locally. Th...
PT-2025-23556 · Cimatti · Contact Forms By Cimatti
Name of the Vulnerable Software and Affected Versions: Contact Forms by Cimatti versions 1.9.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's behalf. This can be achieved by tricking the...
PT-2025-23558 · WordPress · Wordpress Comments Import & Export
Name of the Vulnerable Software and Affected Versions: WordPress Comments Import & Export plugin versions up to 2.4.3 Description: The issue arises from a missing capability check on the save settings function and the failure to properly sanitize and escape FTP settings parameters. This allows...