5681 matches found
CVE-2025-46439
Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through = 2.5.1...
WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability
CSRF to Arbitrary File Deletion vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Plugin Central versions = 2.5.1...
CVE-2025-46439
Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through = 2.5.1...
CVE-2025-46439 WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central allows Path Traversal. This issue affects Plugin Central: from n/a through 2.5.1...
CVE-2025-46439 WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability
Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through = 2.5.1...
CVE-2025-46439
CVE-2025-46439 is a CSRF-to-Path Traversal vulnerability in the WordPress plugin “Plugin Central” by Vladimir Prelovac. Connected sources corroborate that the issue affects Plugin Central versions from n/a through 2.5.1. The NVD entry and Patchstack listing describe the flaw as Cross-Site Request...
WordPress plugin Plugin Central 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...
PT-2025-17767 · Unknown · Vladimir Prelovac Plugin Central
Name of the Vulnerable Software and Affected Versions: Vladimir Prelovac Plugin Central versions n/a through 2.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Path Traversal. This means an attacker could potentially trick a user into performing unintended...
Security Bulletin: Vulnerability in linux affects IBM Integrated Analytics System [CVE-2024-27399, CVE-2024-36972]
Summary Redhat provided linux is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-27399, CVE-2024-36972 Vulnerability Details CVEID:CVE-2024-27399 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a NULL...
Security Bulletin: IBM Sterling Connect:Direct Web Services 6.1 is affected by PostgreSQL vulnerability.
Summary IBM Connect:Direct Web Services uses PostgreSQL and is vulnerable to CVE-2025-1094. Vulnerability Details CVEID:CVE-2025-1094 DESCRIPTION: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from insufficient validation of input data. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-29821
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...
Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025)
Overview Trend Micro Incorporated has released security updates for Endpoint security products for enterprises. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Trend Micro Apex Central 2019 Information Disclosure due to...
Trend Micro Apex Central modTMSM Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...
Trend Micro Apex Central modOSCE Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...
Trend Micro Apex Central Query Server-Side Request Forgery Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the Query method. The issue results from the lack of...
Vulnerability fixed in Microsoft Dynamics
Microsoft has fixed a vulnerability in Dynamics. A vulnerability marked CVE-2025-29821, from incorrect input validation in Dynamics Business Central, allowed a malicious party to gain access to sensitive data. If successfully exploited, the malicious party can recover passwords in unencrypted tex...
CVE-2025-29821
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...
