27718 matches found
CVE-2025-2942
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
Fedora 42 : php (2025-2c344545bf)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2c344545bf advisory. PHP version 8.4.10 03 Jul 2025 BcMath: Fixed bug GH-18641 Accessing a BcMath\Number property by ref crashes. nielsdos Core: Fixed bugs GH-17711 and...
CVE-2025-7518
creationtimestamp| type| source ---|---|--- 2025-07-12 10:20:52+00:00| seen| Telegram/kKL7djxTP2s-Y-y29otbZ6MXBaiQPpwgVO-eVUBsvvVX3iU...
CVE-2025-1313
creationtimestamp| type| source ---|---|--- 2025-07-12 06:21:49+00:00| seen| Telegram/Ft52YvSvHfSx4lja7k4ZQQlQKEMmEDp4g0jNd5UmQ7STk...
CVE-2025-52983
creationtimestamp| type| source ---|---|--- 2025-07-12 04:20:27+00:00| seen| Telegram/z8sZN8Jj8rC4ynqHqFaavek1T6PoWSjnICUpa-QS-gVjbvM...
CVE-2025-7425
creationtimestamp| type| source ---|---|--- 2025-07-11 19:10:57+00:00| seen| https://seclists.org/oss-sec/2025/q3/33 2025-07-14 10:22:52+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ltw67fyiun2p 2025-08-02 12:56:19+00:00| seen|...
CVE-2025-30403
creationtimestamp| type| source ---|---|--- 2025-07-11 19:05:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114836157560524893...
CVE-2025-52951
creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:11+00:00| seen| Telegram/kkSDHnydT8KB8qrfX5aVARNi4bfYfHed2L6Zq5TyfaKN4M...
CVE-2025-52948
creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:04+00:00| seen| Telegram/KwcT9JHG2ASMkC6MSKh65jZfiKcM9S3aOqCXeH2ZsSJMwGo...
Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().
...
CVE-2025-2942
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
CVE-2025-2942 Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title such as from draft and private posts via an unauthenticated AJAX action, allowing attackers to retrieve such information...
CVE-2025-2942
CVE-2025-2942 affects the Order Delivery Date WordPress plugin prior to version 12.6.0. An unauthenticated AJAX action discloses arbitrary post titles (including drafts/private posts), enabling information disclosure. The root cause is an insecure AJAX endpoint that returns post title data withou...
WordPress plugin Order Delivery Date 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
GHSA-6MWM-V2VV-PP96
creationtimestamp| type| source ---|---|--- 2025-07-10 21:42:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114831114266746840...
GHSA-QJMQ-H3CC-QV6W
creationtimestamp| type| source ---|---|--- 2025-07-10 20:18:47+00:00| seen| Telegram/pXxe8XI9mTW8yWY1Nl3-04J6wo96nS-LpCGFCKzO-5Tgl0 2025-07-10 20:18:48+00:00| seen| Telegram/Pg251So2l8iDRxAy6wiLQWBAZc72ZtkVSL5WWSapRXHyJ7Q...
GHSA-VGG9-87G3-85W8
creationtimestamp| type| source ---|---|--- 2025-07-10 19:39:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830630125204075...
CVE-2024-42516
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP...