Debian: Security Advisory (DSA-5902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3292 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationupdateprofiledetails due to missing validation on the 'userid' use...

PT-2025-16168 · WordPress · User Registration & Membership

Name of the Vulnerable Software and Affected Versions: User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress versions up to, and including, 4.1.3 Description: The issue allows unauthenticated attackers to update other users' passwords if they...

Debian: Security Advisory (DLA-4122-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libmozjs-128-0-128.9.0-1.1 on GA media (moderate)

libmozjs-128-0-128.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14975-1 Rating: moderate Cross-References: CVE-2025-3028 CVSS scores: CVE-2025-3028 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2025-26687

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-29812

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10964 2025-04-09 03:00:00+00:00| seen|...

APSB25-27 : Security update available for Adobe Experience Manager Forms

Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...

python311-ecdsa-0.19.1-1.1 on GA media (moderate)

python311-ecdsa-0.19.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14965-1 Rating: moderate Cross-References: CVE-2022-0778 CVSS scores: CVE-2022-0778 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

GraphicsMagick-1.3.45-2.1 on GA media (moderate)

GraphicsMagick-1.3.45-2.1 on GA media Announcement ID: openSUSE-SU-2025:14949-1 Rating: moderate Cross-References: CVE-2025-27795 CVE-2025-27796 CVSS scores: CVE-2025-27795 SUSE : 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2025-27795 SUSE : 5.1...

istioctl-1.25.1-1.1 on GA media (moderate)

istioctl-1.25.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14938-1 Rating: moderate Cross-References: CVE-2025-30157 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2024-13710

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebudsettings' page. This makes it possible for unauthenticated attackers to update...

SUSE-SU-2025:1004-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879...

CVE-2024-11137

An Insecure Direct Object Reference IDOR vulnerability exists in the PATCH /v1/runs/:id/score endpoint of lunary-ai/lunary version 1.6.0. This vulnerability allows an attacker to update the score data of any run by manipulating the id parameter in the request URL, which corresponds to the...

CVE-2024-10445

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via...

AlmaLinux 8 : libreoffice (ALSA-2025:2868)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:2868 advisory. libreoffice: Macro URL arbitrary script execution CVE-2025-1080 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory...

CVE-2024-11285 WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover

The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 7.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email via the accountsettingscallback function. This...

python311-3.11.11-4.1 on GA media (moderate)

python311-3.11.11-4.1 on GA media Announcement ID: openSUSE-SU-2025:14872-1 Rating: moderate Cross-References: CVE-2025-1795 CVSS scores: CVE-2025-1795 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2025-1795 SUSE : 2.3...

PT-2025-11033 · Bitdefender · Bitdefender Box

Name of the Vulnerable Software and Affected Versions: Bitdefender Box versions 1.3.11.490 through 1.3.11.505 Description: The issue concerns the use of the insecure HTTP protocol to download assets over the Internet for updating and restarting daemons and detection rules on devices. Updates can ...