PT-2025-14252 · Unknown · Pluginic Fancypost

Name of the Vulnerable Software and Affected Versions: Pluginic FancyPost versions n/a through 6.0.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS in Pluginic FancyPost...

PT-2025-14180 · Boldgrid · Boldgrid Sprout Clients

Name of the Vulnerable Software and Affected Versions: BoldGrid Sprout Clients versions 3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-14237 · WordPress · Wp Adcenter

Name of the Vulnerable Software and Affected Versions: WP AdCenter versions 2.5.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-14272 · WordPress · Wp Profitshare

Name of the Vulnerable Software and Affected Versions: WP Profitshare versions 1.4.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in WP Profitshare. Recommendations: For versions 1.4.9 and earlier, update to a version that...

PT-2025-14409 · WordPress · Wp Bookmarks

Name of the Vulnerable Software and Affected Versions: WP Bookmarks versions 1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-14220 · WordPress · Viral Loops Wp Integration

Name of the Vulnerable Software and Affected Versions: Viral Loops WP Integration versions 3.4.0 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For versions 3.4.0 and earlier, update...

PT-2025-14095

Name of the Vulnerable Software and Affected Versions MongoDB versions prior to 5.0.31 MongoDB versions prior to 6.0.20 MongoDB versions prior to 7.0.16 Description Specifically crafted MongoDB wire protocol messages can cause MongoDB to crash during command validation. This issue can occur witho...

PT-2025-14071 · Unknown · Qi Addons For Elementor

Name of the Vulnerable Software and Affected Versions: King Addons for Elementor versions through 24.12.58 Description: The issue is related to a Missing Authorization vulnerability. It is reported to affect devices worldwide, but the exact number of potentially affected devices is not specified...

PT-2025-14185 · Unknown · Neteuro Turisbook Booking System

Name of the Vulnerable Software and Affected Versions: Neteuro Turisbook Booking System versions 1.3.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CBL Mariner 2.0 Security Update: php (CVE-2025-1217)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1217 advisory. - In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when...

Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2025-006)

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2025-006 advisory. LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An...

Medium: python-pip

Issue Overview: Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. CVE-2007-4559...

PT-2025-14200 · Unknown · Ai Content Writer

Name of the Vulnerable Software and Affected Versions: ContentBot AI Writer versions 1.2.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in ContentBot AI Writer...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1313)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1329)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1332)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1330)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4100-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2025-1325)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...