3620 matches found
WordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Jingle Bells in WordPress Plugin Hospital Management System versions = 47.020-11-2023...
CVE-2025-44893
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the webaclmgmtRulesApplypost function...
Fedora 41 : sfnt2woff-zopfli (2025-a2a56326b3)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a2a56326b3 advisory. Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits. Tenable has extracted the...
CVE-2025-22792
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2...
CVE-2025-48256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes Import Social Events import-facebook-events allows Stored XSS.This issue affects Import Social Events: from n/a through = 1.8.5...
CVE-2025-48232
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Stored XSS.This issue affects Xpro Addons For Beaver Builder – Lite: from n/a through = 1.5.5...
WordPress WP-PManager plugin <= 1.2 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin WP-PManager versions = 1.2...
WordPress RegistrationMagic plugin < 6.0.2.1 - Stored XSS vulnerability
Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin RegistrationMagic versions 6.0.2.1...
WordPress Download Manager plugin <= 3.2.98 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Download Manager versions = 3.2.98...
WordPress ImageMagick Engine plugin < 1.7.11 - Administrator+ OS Command Injection vulnerability
Administrator+ OS Command Injection vulnerability discovered by Chaiwat Thongyaem in WordPress Plugin ImageMagick Engine versions 1.7.11...
WordPress Responsive Gallery Grid plugin < 2.3.15 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Responsive Gallery Grid versions 2.3.15...
CVE-2025-23164
A misconfigured access token mechanism in the Unifi Protect Application Version 5.3.41 and earlier could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled...
CVE-2025-4904 D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. This vulnerability affects the function sub41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed...
WordPress Advance Post Prefix plugin <= 1.1.1 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin Advance Post Prefix versions = 1.1.1...
K000151411: Apache Tomcat vulnerability CVE-2025-31651
Security Advisory Description CVE-2025-31650 Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger a...
WordPress Connexion Logs plugin <= 3.0.2 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Régis SENET in WordPress Plugin Connexion Logs versions = 3.0.2...
CVE-2025-4805
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS allows Stored XSS. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through...
CVE-2025-4752
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /installbase.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has bee...
python311-oauthlib-3.2.2-5.4 on GA media (moderate)
python311-oauthlib-3.2.2-5.4 on GA media Announcement ID: openSUSE-SU-2025:15100-1 Rating: moderate Cross-References: CVE-2022-36087 CVSS scores: CVE-2022-36087 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...