6414 matches found
WordPress WP Google Map plugin < 1.9.4 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin WP Google Map versions 1.9.4...
WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin K Elements versions 5.4.0...
AZL-57061 CVE-2025-1376 affecting package elfutils for versions less than 0.189-4
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The...
CVE-2025-1181 affecting package binutils for versions less than 2.37-12
CVE-2025-1181 affecting package binutils for versions less than 2.37-12. A patched version of the package is available...
AZL-56873 CVE-2025-1352 affecting package elfutils for versions less than 0.189-5
A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. Th...
CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24
CVE-2023-3978 affecting package kubevirt for versions less than 0.59.0-24. A patched version of the package is available...
CVE-2025-23652
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fabio Zuanon Add custom content after post add-custom-content-after-post allows Reflected XSS.This issue affects Add custom content after post: from n/a through = 1.0...
OESA-2025-1108 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed...
WordPress Forminator plugin < 1.38.3 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Forminator versions 1.38.3...
CVE-2025-24812
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1212C AC/DC/Rly...
CVE-2024-53648
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V9.90, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V9.90, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V9.90, SIPROTEC 5 6MD89 CP300 All versions V9.90, SIPROTEC 5...
WordPress Everest Forms plugin < 3.0.8.1 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Everest Forms versions 3.0.8.1...
firefox: thunderbird: Certificate length was not properly checked
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed...
Drupal Configuration Split module < 1.10.0,2.0.0-2.0.1 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Eric Smith ericgsmith in WordPress Module Configuration Split versions 1.10.0,2.0.0-2.0.1...
firefox: thunderbird: Certificate length was not properly checked
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed...
CVE-2024-54015
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 = V8.80 V10.0, SIPROTEC 5 7ST85 CP300 V9.6x All versions V9.68, SIPROTEC 5 7ST86 CP300 All versions...
CVE-2024-53648
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V9.90, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V9.90, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V9.90, SIPROTEC 5 6MD89 CP300 All versions V9.90, SIPROTEC 5...
CVE-2025-24812
A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly 6ES7211-1BE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/DC 6ES7211-1AE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1211C DC/DC/Rly 6ES7211-1HE40-0XB0 All versions V4.7, SIMATIC S7-1200 CPU 1212C AC/DC/Rly...
CVE-2025-24812
Siemens CVE-2025-24812 affects the SIMATIC S7-1200 CPU family (including SIPLUS variants) with all versions prior to V4.7. Affected devices do not process certain specially crafted packets sent to port 102/tcp, enabling an attacker to cause a denial of service. The issue is documented across mult...