CVE-2021-20255 affecting package qemu for versions less than 6.2.0-18

CVE-2021-20255 affecting package qemu for versions less than 6.2.0-18. A patched version of the package is available...

WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Psai in WordPress Plugin User Registration versions 4.2.0...

CVE-2025-46228

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post allows DOM-Based XSS.This issue affects Event post: from n/a through = 5.9.11...

CVE-2025-46254

CVE-2025-46254 affects the Visual Composer Website Builder WordPress plugin (versions through 45.10.0). The issue is a Stored Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Exploitation could occur via stored inputs that are rendere...

CVE-2025-46226 WordPress MPL-Publisher plugin <= 2.18.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ferranfg MPL-Publisher mpl-publisher allows Stored XSS.This issue affects MPL-Publisher: from n/a through = 2.18.0...

CVE-2025-2300 Information exposure vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...

CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

PT-2025-17464 · Mediawiki · Managewiki

Name of the Vulnerable Software and Affected Versions: ManageWiki versions before commit f504ed8 Description: The issue is related to SQL injection when renaming a namespace in Special:ManageWiki/namespaces, specifically when using a page prefix with an injection payload. This occurs in ManageWik...

CVE-2025-43971

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value for softwareVersionLen...

CVE-2025-27219 affecting package ruby for versions less than 3.3.5-3

CVE-2025-27219 affecting package ruby for versions less than 3.3.5-3. A patched version of the package is available...

CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13

CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13. A patched version of the package is available...

CVE-2025-27144 affecting package telegraf for versions less than 1.31.0-8

CVE-2025-27144 affecting package telegraf for versions less than 1.31.0-8. A patched version of the package is available...

Traefik affected by Go HTTP Request Smuggling Vulnerability

Summary net/http: request smuggling through invalid chunked data: The net/http package accepts data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk...

OpenMetadata SQL Injection

OpenMetadata =1.4.1 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the WorkflowDAO interface. The workflowtype and status parameters can be used to build a SQL query...

CVE-2025-24548

CVE-2025-24548 affects the WordPress plugin Autoglot – Automatic WordPress Translation, with a Reflected XSS vulnerability in versions n/a through 2.4.7 due to improper input neutralization during web page generation. Reported across multiple sources (NVD/Red Hat/CVE List) and corroborated by PT ...

CVE-2025-39569 WordPress Taskbuilder plugin <= 4.0.1 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through = 4.0.1...

CVE-2025-39427 WordPress WP Post to PDF Enhanced plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beth Tucker Long WP Post to PDF Enhanced wp-post-to-pdf-enhanced allows Stored XSS.This issue affects WP Post to PDF Enhanced: from n/a through = 1.1.1...

CVE-2025-39444

CVE-2025-39444 – WordPress MaxButtons plugin

CVE-2025-26477

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...

Microsoft Azure Promptflow Python Library promptflow-core < 1.17.2 RCE

The detected version of Microsoft Azure Promptflow python package, promptflow-core, is prior to version 1.17.2. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute unauthorized arbitrary...