CVE-2025-12385 affecting package qtdeclarative for versions less than 6.6.1-2

CVE-2025-12385 affecting package qtdeclarative for versions less than 6.6.1-2. A patched version of the package is available...

CVE-2025-14744 Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS

Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...

CVE-2025-14744

CVE-2025-14744 concerns Unicode RTLO spoofing in Firefox for iOS prior to version 144.0. The issue allows a malicious website to render spoofed filenames in the downloads UI, potentially misleading users into saving files with an unintended file type. Affected product: Firefox for iOS

CVE-2025-64378

CVE-2025-64378 describes a Missing Authorization vulnerability in the WordPress ListingPro theme (ListingPro) prior to version 2.9.10. The root cause is misconfigured access control security levels that allow exploitation without user interaction, leading to potential elevation of privileges or u...

CVE-2025-64223

CVE-2025-64223 affects the WordPress PenNews plugin/theme and is a PHP Local File Inclusion vulnerability caused by improper control of the filename for include/require. The issue affects PenNews versions older than 6.7.3. Metrics indicate a high-severity impact (CVSS 3.1: base score 8.1) with ne...

EUVD-2025-204086

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through 4.1.14...

CVE-2025-60050 WordPress Panda theme <= 1.21 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Panda panda allows PHP Local File Inclusion.This issue affects Panda: from n/a through = 1.21...

PT-2025-52045

Name of the Vulnerable Software and Affected Versions BoldThemes DentiCare versions prior to 1.4.3 Description A flaw exists in BoldThemes DentiCare that allows for object injection due to deserialization of untrusted data. This issue could potentially allow an attacker to compromise the system...

CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.55.0-26

CVE-2025-58183 affecting package containerized-data-importer for versions less than 1.55.0-26. A patched version of the package is available...

CVE-2021-32256 affecting package gcc for versions less than 11.2.0-9

CVE-2021-32256 affecting package gcc for versions less than 11.2.0-9. A patched version of the package is available...

AZL-72466 CVE-2025-68229 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix segfault in tcmlooptpgaddressshow If the allocation of tlhba-sh fails in tcmloopdriverprobe and we attempt to dereference it in tcmlooptpgaddressshow we will get a segfault, see below for an example. So...

CVE-2025-68054 WordPress CountDown With Image or Video Background plugin <= 1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup CountDown With Image or Video Background countdownwithbackground allows Blind SQL Injection.This issue affects CountDown With Image or Video Background: from n/a through = 1.5...

CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14

CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14. A patched version of the package is available...

CVE-2025-40337 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40337 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40200 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40200 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40308 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40308 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40297 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40297 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40292 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40292 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40343 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40343 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40310 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40310 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...