1997 matches found
CVE-2025-27144 affecting package skopeo for versions less than 1.14.4-4
CVE-2025-27144 affecting package skopeo for versions less than 1.14.4-4. A patched version of the package is available...
WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Traveler versions 3.2.1...
WordPress Traveler theme < 3.2.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Traveler versions 3.2.1...
CVE-2025-20233
CVE-2025-20233 concerns the Splunk App for Lookup File Editing (pre-4.0.5). A script uses Python’s chmod and makedirs in a way that yields overly broad read and execute permissions, causing improper access control for a low-privileged user. The provided documents do not specify a remediation. Mon...
CVE-2025-2596 Session logout can be overwritten by long lasting request
Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...
WordPress WP-Recall plugin < 16.26.12 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin WP-Recall versions 16.26.12...
WordPress Site Reviews plugin < 7.2.5 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Site Reviews versions 7.2.5...
Drupal Link field display mode formatter module < 1.6.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Daniel Wehner dawehner in WordPress Module Link field display mode formatter versions 1.6.0...
CVE-2024-49934 affecting package kernel for versions less than 6.6.64.2-9
CVE-2024-49934 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...
CVE-2026-24800 affecting package cloud-hypervisor for versions less than 32.0-6
CVE-2026-24800 affecting package cloud-hypervisor for versions less than 32.0-6. A patched version of the package is available...
AZL-58380 CVE-2025-22870 affecting package git-lfs for versions less than 3.5.1-5
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...
CVE-2025-27397
A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write...
CVE-2025-27395
A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit the scope of files accessible through and the privileges of the SFTP functionality. This could allow an authenticated highly-privileged remote attacker to read and...
CVE-2025-26596 affecting package xorg-x11-server for versions less than 1.20.10-15
CVE-2025-26596 affecting package xorg-x11-server for versions less than 1.20.10-15. A patched version of the package is available...
AZL-58368 CVE-2025-2153 affecting package hdf5 for versions less than 1.14.6-1
A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SMdelete of the file H5SM.c of the component h5 File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The complexity of an attack is...
firefox: Clickjacking the registerProtocolHandler info-bar Reporter
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A web page could trick a user into setting that site as the default handler for a custom URL protocol...
Confluence Migrator Application 信息泄露漏洞
Confluence Migrator Application is an open source migrator application from XWiki SAS. An information disclosure vulnerability exists in Confluence Migrator Application versions prior to 1.11.7. An attacker can exploit this vulnerability to obtain sensitive information...
firefox: Clickjacking the registerProtocolHandler info-bar Reporter
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A web page could trick a user into setting that site as the default handler for a custom URL protocol...
DEBIAN-CVE-2025-1938
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef...