6411 matches found
CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44
CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44. A patched version of the package is available...
CVE-2025-13417 Plugin Organizer < 10.2.4 - Subscriber+ SQLi
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
CVE-2025-68156 affecting package coredns for versions less than 1.11.4-12
CVE-2025-68156 affecting package coredns for versions less than 1.11.4-12. A patched version of the package is available...
CVE-2025-12105 affecting package libsoup for versions less than 3.4.4-11
CVE-2025-12105 affecting package libsoup for versions less than 3.4.4-11. A patched version of the package is available...
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by mcdruid in WordPress Plugin IF AS Shortcode versions = 1.2...
CVE-2025-68532 WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through 1.5.6...
WordPress Ocean Modal Window plugin < 2.3.3 - Editor+ Remote Code Execution vulnerability
Editor+ Remote Code Execution vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin Ocean Modal Window versions 2.3.3...
AZL-73186 CVE-2025-13699 affecting package mariadb for versions less than 10.11.15-1
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors m...
AZL-73190 CVE-2025-13699 affecting package mariadb for versions less than 10.6.24-1
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors m...
CVE-2025-65082 affecting package httpd for versions less than 2.4.66-1
CVE-2025-65082 affecting package httpd for versions less than 2.4.66-1. An upgraded version of the package is available that resolves this issue...
firefox: thunderbird: Use-after-free in the WebRTC: Signaling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...
📄 HPE OneView Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability against Hewlett Packard Enterprise HPE OneView. All versions below 11.00 are vulnerable so long as the vendor supplied hotfix has not been applied, however some VM product versions do not enable the vulnerable...
CVE-2025-14744
Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0...
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13. A patched version of the package is available...
CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6
CVE-2025-65637 affecting package prometheus for versions less than 2.37.9-6. A patched version of the package is available...
CVE-2025-65637 affecting package kubevirt for versions less than 0.59.0-32
CVE-2025-65637 affecting package kubevirt for versions less than 0.59.0-32. A patched version of the package is available...
CVE-2025-31133 affecting package kubernetes for versions less than 1.28.4-20
CVE-2025-31133 affecting package kubernetes for versions less than 1.28.4-20. A patched version of the package is available...
CVE-2025-65637 affecting package jx for versions less than 3.2.236-24
CVE-2025-65637 affecting package jx for versions less than 3.2.236-24. A patched version of the package is available...