CVE-2025-32537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Lock Your Updates lock-your-updates allows Reflected XSS.This issue affects Lock Your Updates: from n/a through = 1.1...

CVE-2025-32537 WordPress Lock Your Updates Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Lock Your Updates lock-your-updates allows Reflected XSS.This issue affects Lock Your Updates: from n/a through = 1.1...

CVE-2025-32537

CVE-2025-32537 corresponds to a Reflected XSS in the WordPress plugin “Lock Your Updates” (versions up to 1.1). The vulnerability is described as Improper Neutralization of Input During Web Page Generation. The connected Wordfence data confirms the entry exists and links it to the Lock Your Updat...

CVE-2025-32537 WordPress Lock Your Updates Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rachel Cherry Lock Your Updates allows Reflected XSS. This issue affects Lock Your Updates: from n/a through 1.1...

Security Updates for Microsoft Visual Studio 2022 17.13 Products (April 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by a Improper access control vulnerabilitiy in Visual Studio allows an authorized attacker to eleveate priveleges locally CVE-2025-29804 Note that Nessus has not tested for these issues but has instea...

Security Updates for Microsoft Visual Studio 2022 17.8 / 17.10 / 17.12 Products (April 2025)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Improper access control in Visual Studio allows an authorized attacker to eleveate priveleges locally CVE-2025-29802 - Improper access control in Visual Studi...

Security Updates for Microsoft Office Products C2R (April 2025)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-27745, CVE-2025-27746,...

Microsoft Security Update Validation Report April 2025

Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

OPENSUSE-SU-2025:14987-1 python311-PyJWT-2.10.1-2.1 on GA media

These are all security issues fixed in the python311-PyJWT-2.10.1-2.1 package on the GA media of openSUSE Tumbleweed...

Security Updates for Microsoft Dynamics 365 Business Central (April 2025)

The Microsoft Dynamics 365 Business Central install is missing security updates. It is, therefore, affected by a information disclosure vulnerability. Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally. Note that Nessus has not...

Security Updates for Microsoft OneNote C2R (April 2025)

The Microsoft OneNote Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. Th...

Security Updates for Microsoft Word Products C2R (April 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-27747, CVE-2025-29820 Note that...

openSUSE Security Advisory (SUSE-SU-2025:1180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-HFG3-P5HV-FP8W

Bulletin has no description...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the /api/v4/audits endpoint. An attacker can retrieve User Activity Logs by exploiting insufficient access controls, despite not having the required permissions for Compliance Monitoring. Remediation...

Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities

Summary IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities. IBM has addressed the relevant vulnerabilities with updates. Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel...

CVE-2025-32382

Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...

CVE-2025-32395

Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13, the contents of arbitrary files can be returned to the browser if the dev server is running on Node or Bun. HTTP 1.1 spec RFC 9112 does not allow in request-target. Although an attacker can sen...

CGA-HHCG-88VH-3QHX

Bulletin has no description...

ABB MV Drives

SUMMARY Multiple vulnerabilities regarding the CODESYS Runtime System from CODESYS Group have been publicly reported. CODESYS Runtime System v.3.5.15.0 is utilized in the firmware of ABB MV ACS6080 and ACS5000 drives to provide IEC 61131 programming capabilities. These vulnerabilities could lead...