12715 matches found
PT-2025-14903 · Aiven · Aiven-Extras
Name of the Vulnerable Software and Affected Versions: aiven-extras versions prior to 1.1.16 Description: This issue is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases using the aiven-extras package. It leverages the format function not being...
BIT-DOLIBARR-2021-36625
An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...
RHSA-2025:3549 Red Hat Security Advisory: libreoffice security update
Bulletin has no description...
CVE-2025-22005 ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that fib6nhinit cleans up everything when it fails. Commit 7dd73168e273 "ipv6: Always allocate pcpu memory in a fib6nh" moved fibnhcommoninit before...
WordPress MapPress Maps for WordPress plugin < 2.94.9 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin MapPress Maps for WordPress versions 2.94.9...
WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass
Overview WinRAR provided by RARLAB contains a vulnerability that bypasses the "Mark of the Web" CWE-356 security warning function for files when opening a symbolic link that points to an executable file. In the initial Windows configuration, only administrators have the privilege to create symbol...
JVN#59547048: WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass
WinRAR provided by RARLAB contains a vulnerability that bypasses the "Mark of the Web" CWE-356 security warning function for files when opening a symbolic link that points to an executable file. In the initial Windows configuration, only administrators have the privilege to create symbolic links...
DSA-5892-1 atop - security update
Bulletin has no description...
PT-2025-14732 · Unknown · Think201 Clients
Name of the Vulnerable Software and Affected Versions: Think201 Clients versions 1.1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Think201 Clients...
PT-2025-14704 · Unknown · Wptobe-Signinup
Name of the Vulnerable Software and Affected Versions: Wptobe-signinup versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...
PT-2025-14730 · Unknown · Rich Text Editor
Name of the Vulnerable Software and Affected Versions: Rich Text Editor versions 1.0.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Rich Text Editor, which allows exploitation of incorrectly configured access control security levels. Recommendation...
PT-2025-14747 · WordPress · Wpshopee Awesome Logos
Name of the Vulnerable Software and Affected Versions: wpshopee Awesome Logos versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...
PT-2025-14794 · Netwrix · Netwrix Password Secure
Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure versions 9.2 and earlier Description: The issue allows command injection. This means that an attacker could potentially execute system commands, which could lead to unauthorized access or control of the system...
PT-2025-14746 · Mediaview · Mediaview
Name of the Vulnerable Software and Affected Versions: MediaView versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in MediaView. Recommendations: For versions...
PT-2025-14735 · Unknown · Textme Sms
Name of the Vulnerable Software and Affected Versions: TextMe SMS versions 1.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For TextMe SMS versions 1.9.1 an...
PT-2025-14581 · WordPress · Mappress Maps
Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions prior to 2.94.9 Description: The issue concerns the MapPress Maps plugin for WordPress, where certain parameters are not properly sanitized and escaped when displayed on the page. This could allow users wi...
ALSA-2025:3556 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3029 firefox: thunderbird: Use-after-free triggered by XSLTProcessor CVE-2025-3028 firefox...
PT-2025-14725 · WordPress · Sandeep Kumar Wp Video Playlist
Name of the Vulnerable Software and Affected Versions: Sandeep Kumar WP Video Playlist versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Sandee...
PT-2025-14710 · Enituretechnology · Enituretechnology Residential Address Detection
Name of the Vulnerable Software and Affected Versions: enituretechnology Residential Address Detection versions 2.5.4 and earlier Description: The issue is related to a Missing Authorization vulnerability in enituretechnology Residential Address Detection, which allows exploiting incorrectly...
