6413 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-11715
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption...
WordPress PixelYourSite plugin < 11.1.2 - Admin+ LFI vulnerability
Admin+ LFI vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin PixelYourSite – Your smart PIXEL TAG Manager versions 11.1.2...
Oracle MySQL Cluster 8.4.x < 8.4.7 (October 2025 CPU)
The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General libxml2. Easily exploitable vulnerability allows...
libssh: out-of-bounds read in sftp_handle()
A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in...
Kentico Xperience < 13.0.178 Multiple Vulnerabilities
According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.178. It is, therefore, affected by multiple vulnerabilities: - An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync...
EUVD-2025-35438
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injection.This issue affects Learts Addons: from n/a through 1.7.5...
EUVD-2025-35430
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...
CVE-2025-58963
Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through 1.1.9...
CVE-2025-49936
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through 8.3.2...
CVE-2024-45781 affecting package grub2 for versions less than 2.06-15
CVE-2024-45781 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-58058 affecting package packer for versions less than 1.9.5-15
CVE-2025-58058 affecting package packer for versions less than 1.9.5-15. A patched version of the package is available...
CVE-2025-58058 affecting package cri-o for versions less than 1.22.3-16
CVE-2025-58058 affecting package cri-o for versions less than 1.22.3-16. A patched version of the package is available...
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.55.0-25
CVE-2025-58058 affecting package containerized-data-importer for versions less than 1.55.0-25. A patched version of the package is available...
CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-9
CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...
CVE-2025-54409 affecting package aide for versions less than 0.16-17
CVE-2025-54409 affecting package aide for versions less than 0.16-17. A patched version of the package is available...
CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12
CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12. A patched version of the package is available...
CVE-2025-58058 affecting package jx for versions less than 3.2.236-23
CVE-2025-58058 affecting package jx for versions less than 3.2.236-23. A patched version of the package is available...