1924 matches found
PT-2025-43553
Name of the Vulnerable Software and Affected Versions UniFi Access Application versions 3.3.22 through 3.4.31 Description A misconfiguration in the UniFi Access application exposes a management API without proper authentication. An attacker with access to the management network could exploit this...
PT-2025-43239
Name of the Vulnerable Software and Affected Versions IDonatePro versions through 2.1.9 Description A flaw exists in ThemeAtelier IDonatePro that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere. Recommendations...
PT-2025-43193
Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions through 3.3.6 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of malicious scripts into we...
PT-2025-43230
Name of the Vulnerable Software and Affected Versions Wikimedia Foundation Wikipedia Preview versions through 1.15.0 Description An authorization issue exists in Wikimedia Foundation Wikipedia Preview. The issue involves incorrectly configured access control security levels, potentially allowing...
PT-2025-43254
Name of the Vulnerable Software and Affected Versions Toast Mobile Menu versions through 1.0.7 Description The Toast Mobile Menu plugin contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts...
PT-2025-43227
Name of the Vulnerable Software and Affected Versions XLPlugins NextMove Lite versions through 2.21.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue is present in the...
PT-2025-42981
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description A difficult-to-exploit issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A low-privileged attacker with access to the system where Oracle VM...
Siemens HyperLynx and Industrial Edge App Publisher
SUMMARY Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial Edge App Publisher and...
EUVD-2017-0107
Malware in sbrugna...
EUVD-2020-0057
Malware in sbrugna...
EUVD-2020-29748
Malware in sbrugna...
EUVD-2021-2442
Malware in sbrugna...
EUVD-2011-1013
Malware in sbrugna...
EUVD-2020-0528
Malware in sbrugna...
EUVD-2021-2538
Malware in sbrugna...
EUVD-2021-2414
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: apache-commons-vfs (UTSA-2025-984774)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984774 advisory. Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' paramete...
EUVD-2024-2007
Malicious code in bioql PyPI...