org.noear:solon-view-beetl (2.9.2-m2), org.noear:solon-view-enjoy (2.9.2-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m2)

org.noear:solon-view MAVEN version 2.9.2-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.2-m2 - org.noear:solon-view-enjoy 2.9.2-m2 - org.noear:solon-view-freemarker 2.9.2-m2...

org.noear:solon-view-beetl (2.9.4), org.noear:solon-view-enjoy (2.9.4) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.4)

org.noear:solon-view MAVEN version 2.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.4 - org.noear:solon-view-enjoy 2.9.4 - org.noear:solon-view-freemarker 2.9.4 -...

org.noear:folkmq-broker-embedded (>=1.7.8, <=1.7.11), org.noear:grit-server-solon-plugin (>=2.0.0, <=2.0.1) +18 more potentially affected by CVE-2025-2961 via org.noear:solon-view (>=3.0.0-m1, <=3.1.0)

org.noear:solon-view MAVEN version =3.0.0-m1, =1.7.8, =2.0.0, =2.0.0, =1.10.0, =1.9.0, =1.9.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.1.0 and more Source cves: CVE-2025-2961 Source advisory: OSV:GHSA-2M4Q-2C6R-HMC3...

org.noear:folkmq-broker-embedded (>=1.7.8, <=1.7.11), org.noear:grit-server-solon-plugin (>=2.0.0, <=2.0.1) +18 more potentially affected by CVE-2025-2961 via org.noear:solon-view (>=3.0.0-m1, <=3.1.0)

org.noear:solon-view MAVEN version =3.0.0-m1, =1.7.8, =2.0.0, =2.0.0, =1.10.0, =1.9.0, =1.9.0, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.1.0 and more Source cves: CVE-2025-2961 Source advisory: GHSA-2M4Q-2C6R-HMC3...

org.noear:grit.server.ui-durian (1.9.2-m1), org.noear:solon-view-beetl (2.9.2-m1) +13 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2-m1)

org.noear:solon-view MAVEN version 2.9.2-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:grit.server.ui-durian 1.9.2-m1 - org.noear:solon-view-beetl 2.9.2-m1 - org.noear:solon-view-enjoy 2.9.2-m1...

org.noear:solon-view-beetl (2.9.3), org.noear:solon-view-enjoy (2.9.3) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.3)

org.noear:solon-view MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.3 - org.noear:solon-view-enjoy 2.9.3 - org.noear:solon-view-freemarker 2.9.3 -...

org.noear:solon-view-beetl (2.9.5-m1), org.noear:solon-view-enjoy (2.9.5-m1) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.5-m1)

org.noear:solon-view MAVEN version 2.9.5-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.5-m1 - org.noear:solon-view-enjoy 2.9.5-m1 - org.noear:solon-view-freemarker 2.9.5-m1...

org.noear:grit.server.ui-durian (1.9.2), org.noear:marsh-admin (1.8.0) +15 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.2)

org.noear:solon-view MAVEN version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:grit.server.ui-durian 1.9.2 - org.noear:marsh-admin 1.8.0 - org.noear:marsh.uadmin 1.8.0 -...

org.noear:solon-view-beetl (2.9.5-m2), org.noear:solon-view-enjoy (2.9.5-m2) +12 more potentially affected by CVE-2025-2961 via org.noear:solon-view (2.9.5-m2)

org.noear:solon-view MAVEN version 2.9.5-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon-view and may be impacted: - org.noear:solon-view-beetl 2.9.5-m2 - org.noear:solon-view-enjoy 2.9.5-m2 - org.noear:solon-view-freemarker 2.9.5-m2...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the rendermav function. An attacker can access or modify files on the server by manipulating the input to traverse outside the intended directory structure. Remediation Upgrade org.noear:solon-view-beetl ...

PT-2025-13786 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1741784483 Tuleap Enterprise Edition versions prior to 16.5-3 and 16.4-8 Description: The issue is related to missing CSRF protections on artifact submission and edition from the tracker view. An attacker coul...

Tuleap Cross-Site Request Forgery Vulnerability

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. Tuleap suffers from a cross-site request forgery vulnerability that stems from missing CSRF protection in the tracker view, which could lead to a victim submitting...

CVE-2025-29766: Cross-Site Request Forgery (CSRF)

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up...

CVE-2025-30799

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pagup WP Google Street View wp-google-street-view allows Stored XSS.This issue affects WP Google Street View: from n/a through = 1.1.5...

SUSE CVE-2025-1472

Mattermost versions 9.11.x = 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporting to still view team and site statistics...

SUSE-SU-2025:20164-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking...

CVE-2025-2852

A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menus/viewmenu.php. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2025-30799

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pagup WP Google Street View wp-google-street-view allows Stored XSS.This issue affects WP Google Street View: from n/a through = 1.1.5...

CVE-2025-30799 WordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pagup WP Google Street View wp-google-street-view allows Stored XSS.This issue affects WP Google Street View: from n/a through = 1.1.5...

CVE-2025-30799

CVE-2025-30799 affects WP Google Street View (WordPress plugin) up to version 1.1.5 and is a Stored Cross-Site Scripting (XSS) vulnerability reported in the CVE details. The issue arises from improper neutralization of input during web page generation, enabling stored XSS. Wordfence coverage conf...