CVE-2025-46439 WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central allows Path Traversal. This issue affects Plugin Central: from n/a through 2.5.1...

CVE-2025-46439

CVE-2025-46439 is a CSRF-to-Path Traversal vulnerability in the WordPress plugin “Plugin Central” by Vladimir Prelovac. Connected sources corroborate that the issue affects Plugin Central versions from n/a through 2.5.1. The NVD entry and Patchstack listing describe the flaw as Cross-Site Request...

CVE-2025-46439 WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through = 2.5.1...

PT-2025-17767 · Unknown · Vladimir Prelovac Plugin Central

Name of the Vulnerable Software and Affected Versions: Vladimir Prelovac Plugin Central versions n/a through 2.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Path Traversal. This means an attacker could potentially trick a user into performing unintended...

WordPress plugin Plugin Central 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-46439: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through = 2.5.1...

PT-2025-42878

Name of the Vulnerable Software and Affected Versions Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior Description The software is susceptible to XML Injection. The issue affects Zohocorp ManageEngine EndPoint Central. Recommendations Update to a version later than 11.4.2516....

Security Bulletin: Vulnerability in linux affects IBM Integrated Analytics System [CVE-2024-27399, CVE-2024-36972]

Summary Redhat provided linux is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-27399, CVE-2024-36972 Vulnerability Details CVEID:CVE-2024-27399 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a NULL...

Security Bulletin: IBM Sterling Connect:Direct Web Services 6.1 is affected by PostgreSQL vulnerability.

Summary IBM Connect:Direct Web Services uses PostgreSQL and is vulnerable to CVE-2025-1094. Vulnerability Details CVEID:CVE-2025-1094 DESCRIPTION: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn...

Microsoft Dynamics 365 Business Central Unauthorized Access

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025)

Overview Trend Micro Incorporated has released security updates for Endpoint security products for enterprises. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Trend Micro Apex Central 2019 Information Disclosure due to...

Trend Micro Apex Central modTMSM Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Trend Micro Apex Central Query Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the Query method. The issue results from the lack of...

Trend Micro Apex Central modOSCE Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Vulnerability fixed in Microsoft Dynamics

Microsoft has fixed a vulnerability in Dynamics. A vulnerability marked CVE-2025-29821, from incorrect input validation in Dynamics Business Central, allowed a malicious party to gain access to sensitive data. If successfully exploited, the malicious party can recover passwords in unencrypted tex...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-29821

CVE-2025-29821 affects Microsoft Dynamics 365 Business Central. It results from improper input validation in Dynamics Business Central, enabling an authorized attacker to disclose information locally (confidentiality impact HIGH; CVSS v3.1: 5.5 MEDIUM, LOCAL access, no user interaction). Microsof...