WordPress aThemes Starter Sites plugin <= 1.0.53 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by wesley wcraft in WordPress Plugin aThemes Starter Sites versions = 1.0.53...

PT-2024-37844 · Zoho · Opmanager Plus +3

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below Description: The issue concerns an authenticated SQL injection vulnerability in the URL monitoring feature. Recommendations: For versions 128317...

CVE-2024-38872

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...

PT-2025-46311

Name of the Vulnerable Software and Affected Versions ManageEngine Exchange Reporter Plus versions 5723 and below Description The software is susceptible to a Stored Cross-Site Scripting XSS issue present in the Mails Deleted or Moved report. This allows for the injection of malicious scripts tha...

CVE-2018-7159 affecting package rubygem-http_parser for versions less than 0.8.0-1

CVE-2018-7159 affecting package rubygem-httpparser for versions less than 0.8.0-1. A patched version of the package is available...

CVE-2026-48962 affecting package perl for versions less than 5.38.2-510

CVE-2026-48962 affecting package perl for versions less than 5.38.2-510. A patched version of the package is available...

CVE-2026-42497 affecting package perl for versions less than 5.38.2-510

CVE-2026-42497 affecting package perl for versions less than 5.38.2-510. A patched version of the package is available...

CVE-2026-42496 affecting package perl for versions less than 5.38.2-510

CVE-2026-42496 affecting package perl for versions less than 5.38.2-510. A patched version of the package is available...

CVE-2026-8376 affecting package perl for versions less than 5.38.2-512

CVE-2026-8376 affecting package perl for versions less than 5.38.2-512. A patched version of the package is available...

CVE-2026-13221 affecting package perl for versions less than 5.38.2-513

CVE-2026-13221 affecting package perl for versions less than 5.38.2-513. A patched version of the package is available...

CVE-2026-24809 affecting package ntopng for versions less than 5.2.1-4

CVE-2026-24809 affecting package ntopng for versions less than 5.2.1-4. A patched version of the package is available...

AZL-46984 CVE-2024-4076 affecting package bind for versions less than 9.16.50-1

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1...

AZL-46972 CVE-2024-0760 affecting package bind for versions less than 9.20.0-1

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0...

AZL-46981 CVE-2024-1737 affecting package bind for versions less than 9.20.0-1

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 throug...

AZL-46988 CVE-2024-1737 affecting package bind for versions less than 9.16.50-1

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 throug...

AZL-46969 CVE-2024-1975 affecting package bind for versions less than 9.20.0-1

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG0 signed requests. This issue affects BIND 9 versions 9.0.0 through...

WordPress Hide My WP Ghost plugin < 5.2.02 - Hidden Login Page Disclosure vulnerability

Hidden Login Page Disclosure vulnerability discovered by Juan Pablo Gomez Postigo in WordPress Plugin Hide My WP Ghost versions 5.2.02...

CVE-2026-25679 affecting package golang for versions less than 1.2.58-1

CVE-2026-25679 affecting package golang for versions less than 1.2.58-1. A patched version of the package is available...

CVE-2026-27139 affecting package golang for versions less than 1.2.58-1

CVE-2026-27139 affecting package golang for versions less than 1.2.58-1. A patched version of the package is available...

WordPress HTML Forms plugin < 1.3.33 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Majdeddine Ben Hadj Brahim in WordPress Plugin HTML Forms versions 1.3.33...