6413 matches found
AZL-69973 CVE-2025-64329 affecting package moby-containerd for versions less than 1.6.26-13
containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is...
WordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Traveler versions 3.2.6...
AZL-69815 CVE-2024-25621 affecting package moby-containerd-cc for versions less than 1.7.7-13
containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...
EUVD-2025-38072
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...
EUVD-2025-38071
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through 4.2.0...
EUVD-2025-38131
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through 1.6.4...
CVE-2025-62230 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3
CVE-2025-62230 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3. A patched version of the package is available...
CVE-2025-40778 affecting package bind for versions less than 9.20.15-1
CVE-2025-40778 affecting package bind for versions less than 9.20.15-1. A patched version of the package is available...
CVE-2025-62231 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3
CVE-2025-62231 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3. A patched version of the package is available...
CVE-2025-62229 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3
CVE-2025-62229 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3. A patched version of the package is available...
CVE-2025-59530 affecting package coredns for versions less than 1.11.4-11
CVE-2025-59530 affecting package coredns for versions less than 1.11.4-11. A patched version of the package is available...
CVE-2025-64198 WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 10.7.1...
CVE-2025-62055 WordPress Academist theme < 1.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...
CVE-2025-62053
CVE-2025-62053 describes a Local File Inclusion (LFI) vulnerability in the WordPress Houzez theme prior to version 4.2.0 . The issue arises from an improper control of the filename used in include/require statements within the PHP code, enabling an attacker to potentially include local files on t...
CVE-2025-62037
CVE-2025-62037 concerns the Togo WordPress theme (versions before 1.0.4) with a Missing Authorization/Broken Access Control vulnerability. The issue stems from lack of proper authorization checks, potentially allowing unauthorized access to restricted resources. Public documents from Red Hat, ENI...
CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62036
CVE-2025-62036 is a Cross-Site Scripting (XSS) vulnerability affecting the WordPress theme Togo (uxper) versions prior to 1.0.4. The issue arises from improper input neutralization during web page generation. Affected product: Togo theme (
CVE-2025-62033 WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...
CVE-2025-62032 WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through 3.9.2...