289 matches found
CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-48076 Galette is vulnerable to Cross-site Scripting
Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...
CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1
CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2
CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2
CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-58963
Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through 1.1.9...
CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12
CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12. A patched version of the package is available...
CVE-2025-59571
CVE-2025-59571 describes a Reflected XSS in the WordPress WorkScout-Core plugin, affecting versions older than 1.7.06. The issue arises from improper input neutralization during web page generation. CVSS 3.1 base score 7.1 ( HIGH ) with network access, low impacts to confidentiality/integrity/ava...
CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9
CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...
CVE-2024-45338 affecting package cni for versions less than 1.0.1-20
CVE-2024-45338 affecting package cni for versions less than 1.0.1-20. A patched version of the package is available...
AZL-68664 CVE-2025-46817 affecting package compat-lua 5.1.5-17
Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...
CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30
CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30. A patched version of the package is available...
CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3
CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3. A patched version of the package is available...
CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38671 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-38671 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38471 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-38471 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-38448 affecting package kernel for versions less than 6.6.104.2-1
CVE-2025-38448 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...
AZL-67884 CVE-2025-46152 affecting package pytorch for versions less than 2.2.2-9
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...