23669 matches found
Site Reviews < 7.2.5 - Unauthenticated Stored XSS
Site Reviews WordPress plugin before 7.2.5 contains a stored cross-site scripting caused by improper sanitization and escaping of review fields, letting unauthenticated users execute malicious scripts, exploit requires no authentication. id: CVE-2025-1232 info: name: Site Reviews 7.2.5 -...
Chef Automate < 4.13.295 — SQL Injection
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...
ROOT-APP-MAVEN-CVE-2025-41242 CVE-2025-41242 in org.springframework:spring-webmvc - Patched by Root
Root has patched CVE-2025-41242 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...
Post SMTP <= 3.6.0 - Email Log Disclosure
Post SMTP WordPress plugin = 3.6.0 contains an unauthorized data access vulnerability caused by missing capability check in construct function, letting unauthenticated attackers read arbitrary logged emails, exploit requires no authentication. id: CVE-2025-11833 info: name: Post SMTP = 3.6.0 -...
ROOT-APP-PYPI-CVE-2025-47273 CVE-2025-47273 in setuptools - Patched by Root
Root has patched CVE-2025-47273 in the setuptools package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-58181 CVE-2025-58181 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2025-58181 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-47913 CVE-2025-47913 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2025-47913 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-22872 CVE-2025-22872 in golang.org/x/net - Patched by Root
Root has patched CVE-2025-22872 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-66418 CVE-2025-66418 in urllib3 - Patched by Root
Root has patched CVE-2025-66418 in the urllib3 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-13033 CVE-2025-13033 in nodemailer - Patched by Root
Root has patched CVE-2025-13033 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2025-22869 CVE-2025-22869 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2025-22869 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-39703 CVE-2025-39703 in linux - Patched by Root
Root has patched CVE-2025-39703 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-71315 CVE-2025-71315 in linux - Patched by Root
Root has patched CVE-2025-71315 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38180 CVE-2025-38180 in linux - Patched by Root
Root has patched CVE-2025-38180 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38206 CVE-2025-38206 in linux - Patched by Root
Root has patched CVE-2025-38206 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38323 CVE-2025-38323 in linux - Patched by Root
Root has patched CVE-2025-38323 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-40294 CVE-2025-40294 in linux - Patched by Root
Root has patched CVE-2025-40294 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-40322 CVE-2025-40322 in linux - Patched by Root
Root has patched CVE-2025-40322 in the linux package for Root:Debian:12. Multiple fixed versions available...