WordPress Kleo Theme < 5.4.4 is vulnerable to Broken Access Control

Software Kleo Type Theme Vulnerable versions 5.4.4 Fixed in 5.4.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-39367 Patch priority Low CVSS severity Low 5.3 Developer EPC PSID 7bef03870816 Credits Ananda Dhakal Patchstack Required privilege...

Fedora 40 : java-latest-openjdk (2025-186e31ca40)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-186e31ca40 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Ubuntu: Security Advisory (USN-7455-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3989

creationtimestamp| type| source ---|---|--- 2025-04-27 23:09:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13643 2025-04-28 00:20:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntinatnen2b 2025-04-28 01:00:49+00:00| published-proof-of-concept|...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-46688

quickjs-ng through 0.9.0 has an incorrect size calculation in JSReadBigInt for a BigInt, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-3983

creationtimestamp| type| source ---|---|--- 2025-04-27 20:09:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13635 2025-04-27 21:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owz5e52b 2025-04-27 23:00:33+00:00| seen|...

CVE-2025-3981

creationtimestamp| type| source ---|---|--- 2025-04-27 19:09:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13631 2025-04-27 21:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7ow44qt2l 2025-04-27 23:00:39+00:00| seen|...

CVE-2025-3976

creationtimestamp| type| source ---|---|--- 2025-04-27 16:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13623 2025-04-27 18:49:49+00:00| seen| https://t.me/cvedetector/23846 2025-04-27 19:00:35+00:00| published-proof-of-concept|...

CVE-2025-3971

creationtimestamp| type| source ---|---|--- 2025-04-27 14:09:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13620 2025-04-27 15:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbq3rqg2v 2025-04-27 16:00:33+00:00| published-proof-of-concept|...

CVE-2025-3965

creationtimestamp| type| source ---|---|--- 2025-04-27 10:10:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13613 2025-04-27 11:24:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns563lrxvp2 2025-04-27...

CVE-2024-52888

creationtimestamp| type| source ---|---|--- 2025-04-27 08:08:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13608 2025-04-27 11:23:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns563a62sp2 2025-04-27 11:34:50+00:00| seen|...

CVE-2025-3958

creationtimestamp| type| source ---|---|--- 2025-04-27 04:09:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13601 2025-04-27 04:40:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnrgakkjlek2 2025-04-27...

CVE-2025-46580

creationtimestamp| type| source ---|---|--- 2025-04-27 03:08:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13600 2025-04-27 03:35:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnrd323bfz2b 2025-04-27 04:30:49+00:00| seen|...

CVE-2025-46674

creationtimestamp| type| source ---|---|--- 2025-04-27 01:08:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13590 2025-04-27 01:48:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114407408963291150 2025-04-27 03:35:31+00:00| seen|...

Fedora 41 : java-17-openjdk (2025-22226bdb44)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-22226bdb44 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 41 : java-1.8.0-openjdk (2025-e81dbae527)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e81dbae527 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 40 : java-1.8.0-openjdk (2025-b6323169bc)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-b6323169bc advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora 41 : java-latest-openjdk (2025-aad560ca4b)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-aad560ca4b advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

CVE-2025-46653

Formidable aka node-formidable 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable content; however, hexoid is documented as not "cryptographically secure." Also, there is a scenario in which only the last two characters of a hexoid string nee...