WordPress Themia Lite Theme <= 1.5.0 is vulnerable to Sensitive Data Exposure

Software Themia Lite Type Theme Vulnerable versions = 1.5.0 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 9716909e2868 Credits Legion Hunter Required privilege...

WordPress Rethink Theme <= 1.2.8 is vulnerable to Sensitive Data Exposure

Software Rethink Type Theme Vulnerable versions = 1.2.8 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 9bd607567e0a Credits Legion Hunter Required privilege...

WordPress Cloriato Lite Theme <= 1.7.2 is vulnerable to Sensitive Data Exposure

Software Cloriato Lite Type Theme Vulnerable versions = 1.7.2 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 1e01903a0792 Credits Legion Hunter Required privile...

CVE-2024-45432

OpenSynergy BlueSDK aka Blue SDK through 6.x mishandles a function call. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from an incorrect variable used as a function argument. An attacker can leverage this to cause unexpected behavior or obtain sensitive informatio...

WordPress Road Fighter Theme <= 1.3.5 is vulnerable to Sensitive Data Exposure

Software Road Fighter Type Theme Vulnerable versions = 1.3.5 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 4a67bfb40d4f Credits Legion Hunter Required privileg...

WordPress Compass Theme <= 1.1.4 is vulnerable to Sensitive Data Exposure

Software Compass Type Theme Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 702f7ac34caf Credits Legion Hunter Required privilege...

WordPress ColorWay Theme <= 4.2.3 is vulnerable to Sensitive Data Exposure

Software ColorWay Type Theme Vulnerable versions = 4.2.3 Fixed in N/A OWASP Top 10 A2: Cryptographic Failures Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID f2f3f07e918e Credits Legion Hunter Required privilege...

WordPress Poloray Theme <= 1.3.2 is vulnerable to Sensitive Data Exposure

Software Poloray Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 5bedfaf94c3f Credits Legion Hunter Required privilege...

WordPress ButterBelly Theme <= 1.1.8 is vulnerable to Sensitive Data Exposure

Software ButterBelly Type Theme Vulnerable versions = 1.1.8 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID 425eba8f2184 Credits Legion Hunter Required privilege...

WordPress Dzonia Lite Theme <= 1.7.1 is vulnerable to Sensitive Data Exposure

Software Dzonia Lite Type Theme Vulnerable versions = 1.7.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2025-59003 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID c04d0120d52d Credits Legion Hunter Required privilege...

Cisco Secure Firewall Management Center Authentication Bypass Read Access

The vulnerability of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain read access to data remotely...

SurrealDB is Vulnerable to Unauthorized Data Exposure via LIVE Query Subscriptions

LIVE SELECT statements are used to capture changes to data within a table in real time. Documents included in WHERE conditions and DELETE notifications were not properly reduced to respect the querying user's security context. Instead the leaked documents reflect the context of the user triggerin...

GHSA-7VM2-J586-VCVC SurrealDB is Vulnerable to Unauthorized Data Exposure via LIVE Query Subscriptions

LIVE SELECT statements are used to capture changes to data within a table in real time. Documents included in WHERE conditions and DELETE notifications were not properly reduced to respect the querying user's security context. Instead the leaked documents reflect the context of the user triggerin...

WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abu Hurayra in WordPress Plugin Rank Math SEO versions = 1.0.252.1...

CVE-2025-8557

CVE-2025-8557 concerns Lenovo XClarity Orchestrator (LXCO). An attacker with access to a device on the local LXCO network segment can manipulate that device to create an alternate communication channel, enabling direct interaction with backend LXCO API services that are normally inaccessible to u...

CVE-2025-33045

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data...

CVE-2025-7970

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

Security update for postgresql16

This update for postgresql16 fixes the following issues: Upgraded to 16.10: CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table bsc1248120 CVE-2025-8714: Fixed untrusted data inclusion in pgdump allows superuser of origin server to execute...

Advisory ROSA-SA-2025-2991

software: ghostscript 9.56.1 OS: ROSA-CHROME unaffected versions = ghostscript-9.56.1-7 affected versions ghostscript-9.56.1-7 CVE-ID: CVE-2025-48708 BDU-ID: 2025-06028 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the gslibctxctxstashsanitizedarg function of the base/gslibctx.c file of the...