12715 matches found
Advisory ROSA-SA-2025-2810
Software: libxml2 2.9.7 OS: ROSA Virtualization 3.0 packageevrstring: libxml2-2.9.7-19.rv30 CVE-ID: CVE-2024-56171 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Vulnerability in libxml2: use-after-free in xmlschemas.c. CVE-STATUS: Vulnerability resolved. CVE-REV: To close the vulnerability, run the...
Advisory ROSA-SA-2025-2797
Software: expat 2.2.5 OS: ROSA Virtualization 3.0 packageevrstring: expat-2.2.5-16.0.1.rv30 CVE-ID: CVE-2022-23990 BDU-ID: 2022-00999 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the doProlog function of the Expat library is related to integer overflow. Exploitation of the vulnerability could...
Advisory ROSA-SA-2025-2794
Software: cups 2.2.6 OS: ROSA Virtualization 3.0 packageevrstring: cups-2.2.6-62.rv30 CVE-ID: CVE-2024-47175 BDU-ID: 2024-07645 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the ppdCreatePPDFromIPP2 function of the CUPS print server libppd library is related to failure to take measures to...
PT-2025-16048 · Unknown · Wpsmartcontracts
Name of the Vulnerable Software and Affected Versions: WPSmartContracts versions prior to 2.0.10 Description: The issue is related to an improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This enables an attacker to inject malicious SQL code,...
PT-2025-17556
Name of the Vulnerable Software and Affected Versions Commvault Command Center Innovation Release versions 11.38.0 through 11.38.19 Description A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded b...
PT-2025-16041 · WordPress · Mailhawk
Name of the Vulnerable Software and Affected Versions: Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk versions 1.3.1 and earlier Description: The issue is related to improper control of filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File...
PT-2025-16077 · Unknown · Woocommerce Pickupp
Name of the Vulnerable Software and Affected Versions: WooCommerce Pickupp versions 2.4.0 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This allows for PHP Local File Inclusion, whic...
PT-2025-16089 · Unknown · Oxygensuite Oxygen Mydata For Woocommerce
Name of the Vulnerable Software and Affected Versions: Oxygensuite Oxygen MyData for WooCommerce versions 1.0.0 through 1.0.63 Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows unauthorized access to...
PT-2025-16082 · Unknown · Twispay Credit Card Payments
Name of the Vulnerable Software and Affected Versions: Twispay Credit Card Payments versions 2.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can...
PT-2025-16078 · Unknown · Odude Flexi – Guest Submit
Name of the Vulnerable Software and Affected Versions: odude Flexi – Guest Submit versions 4.28 and earlier Description: The issue is related to an improper control of filename for include/require statement in a PHP program, also known as PHP Remote File Inclusion, which allows PHP Local File...
PT-2025-16038 · Tp Link · Deco Be65 Pro
Name of the Vulnerable Software and Affected Versions: Deco BE65 Pro versions prior to Deco BE65 ProJP V1 1.1.2 Build 20250123 Description: The issue is related to an OS command injection vulnerability. If exploited, it allows a user who can log in to the device to execute an arbitrary OS command...
PT-2025-16060 · Unknown · Sandeep Verma Html5 Video Player With Playlist
Name of the Vulnerable Software and Affected Versions: Sandeep Verma HTML5 Video Player with Playlist versions 2.50 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This enables...
PT-2025-16126 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. The issue was addressed with improved checks. Recommendations: For versions prior to 14, update to macOS 14 to...
OPENSUSE-SU-2025:14985-1 docker-27.5.1_ce-15.1 on GA media
These are all security issues fixed in the docker-27.5.1ce-15.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-16049 · Unknown · N-Media Bulk Product Sync
Name of the Vulnerable Software and Affected Versions: N-Media Bulk Product Sync versions n/a through 8.6 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially...
PT-2025-16096 · Unknown · John Weissberg Print Science Designer
Name of the Vulnerable Software and Affected Versions: John Weissberg Print Science Designer versions 1.3.155 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This allows for Path Traversal, which can...
PT-2025-16142 · Mediawiki · Mediawiki
Name of the Vulnerable Software and Affected Versions: Mediawiki - Version Compare Extension versions 1.39 through 1.43 Description: The issue is related to Improper Encoding or Escaping of Output, which allows Cross-Site Scripting XSS in the Mediawiki - Version Compare Extension. Recommendations...
CVE-2025-32382 Snowflake credentials logged by the Metabase backend
Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...