org.jenkins-ci.plugins:azure-acs (0.2.4), org.jenkins-ci.plugins:azure-dev-spaces (>=3.0.0, <=3.0.3) potentially affected by CVE-2022-27210 via org.jenkins-ci.plugins:kubernetes-cd (0.2.3)

org.jenkins-ci.plugins:kubernetes-cd MAVEN version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:kubernetes-cd and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 - org.jenkins-ci.plugins:azure-dev-spaces =3.0.0...

org.jenkins-ci.plugins:azure-acs (0.2.4), org.jenkins-ci.plugins:azure-dev-spaces (>=3.0.0, <=3.0.3) potentially affected by CVE-2022-27211 via org.jenkins-ci.plugins:kubernetes-cd (0.2.3)

org.jenkins-ci.plugins:kubernetes-cd MAVEN version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:kubernetes-cd and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 - org.jenkins-ci.plugins:azure-dev-spaces =3.0.0...

org.jenkins-ci.plugins:azure-acs (0.2.4), org.jenkins-ci.plugins:azure-dev-spaces (>=3.0.0, <=3.0.3) potentially affected by CVE-2022-27208 via org.jenkins-ci.plugins:kubernetes-cd (0.2.3)

org.jenkins-ci.plugins:kubernetes-cd MAVEN version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:kubernetes-cd and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 - org.jenkins-ci.plugins:azure-dev-spaces =3.0.0...

@egomobile/http-server (>=0.18.0, <=0.23.0), @lyra-network/openapi-dev-tool (>=9.0.0, <=9.5.0) +1 more potentially affected by CVE-2021-46708 via swagger-ui-dist (>=4.0.0-beta.2, <=4.1.2)

swagger-ui-dist NPM version =4.0.0-beta.2, =0.18.0, =9.0.0, =1.3.0-moderate-vulnerability, =24.7.0-moderate-vulnerability Source cves: CVE-2021-46708 Source advisory: GHSA-6C9X-MJ3G-H47X...

wordpress -- multiple issues

wordpress developers reports: This security and maintenance release features 1 bug fix in addition to 3 security fixes. Because this is a security release, it is recommended that you update your sites immediately. All versions since WordPress 3.7 have also been updated. The security team would li...

PT-2022-13488

Name of the Vulnerable Software and Affected Versions gogs versions prior to 0.12.5 Description The issue is related to Server-Side Request Forgery SSRF in the repository migration functionality of gogs. This allows a malicious user to discover services in the internal network. All installations...

PT-2025-8172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel's ASoC subsystem, specifically in the mt8192-mt6359 driver, has been identified. The problem arises from incorrect error handling in the mt8192 mt6359 dev pro...

PT-2025-8215

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the reference counting issue in the tpm module Description A reference counting issue in the Linux kernel's tpm module can lead to a use-after-free warning. This occurs when a...

CVE-2022-0855

CVE-2022-0855 affects microweber-dev/whmcs_plugin prior to version 0.0.4. The root cause is an improper resolution of path equivalence in the plugin, which can enable an open redirect or misrouting of a request. Exploitation details in the connected records describe an open-redirect scenario that...

CVE-2022-0855 Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

WordPress Auto Set Admin Colour on Staging and Dev plugin <= 4.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Auto Set Admin Colour on Staging and Dev plugin versions = 4.0.0. Solution No patched version available...

WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WordPress Dev Powers – ACF Color Coded Field Types Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Dev Powers – ACF Color Coded Field Types Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress Auto Set Admin Colour on Staging and Dev plugin <= 4.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto Set Admin Colour on Staging and Dev plugin versions = 4.0.0. Solution No patched version available...

WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin versions = 1.0.1. Solution No patched version available...

PT-2022-28920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...