9620 matches found
PT-2025-4188 · Samsung · Samsung Find
Name of the Vulnerable Software and Affected Versions: Samsung Find versions prior to SMR Feb-2025 Release 1 Description: The issue is related to improper privilege management, allowing local privileged attackers to disable Samsung Find. This can be exploited by attackers with local access and...
PT-2025-2116
Name of the Vulnerable Software and Affected Versions JustRows free WordPress plugin versions 0.2 and earlier Description The issue arises from the plugin not sanitising and escaping a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. This could be used...
PT-2025-5607
Name of the Vulnerable Software and Affected Versions: Vitest versions prior to 2.1.9 Vitest versions prior to 3.0.4 Description: The screenshot-error handler on the browser mode HTTP server responds to any file on the file system. If the server is exposed on the network by browser.api.host: true...
WordPress Disable Elementor Editor Translation plugin <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Disable Elementor Editor Translation versions = 1.0.2...
SUSE-SU-2025:20011-1 Security update for qemu
This update for qemu fixes the following issues: - Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg an...
PT-2025-3402 · Classcms · Classcms
Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.8 Description: The issue allows attackers to execute arbitrary code and potentially take control of the server by constructing a payload in the classview parameter of the model management feature. This enables them to explo...
PT-2025-2125 · WordPress · Essential Real Estate
Name of the Vulnerable Software and Affected Versions: Essential WP Real Estate WordPress plugin versions 1.1.3 and earlier Description: The issue is related to Reflected Cross-Site Scripting, where generated URLs are not properly escaped before being outputted in attributes. This can lead to...
PT-2025-3005 · Nradio · Nradio N8-180 Nros
Name of the Vulnerable Software and Affected Versions: NRadio N8-180 NROS version 1.9.2.n3.c5 Description: An issue was discovered in NRadio devices, where the "/cgi-bin/luci/nradio/basic/radio" endpoint is vulnerable to XSS via the 2.4 GHz and 5 GHz name parameters. This allows an attacker to...
PT-2025-5202 · Unknown · Notfound Lockets
Name of the Vulnerable Software and Affected Versions: NotFound Lockets versions n/a through 0.999 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations: For versions n/a...
PT-2025-3740 · Arm · Arm 5Th Gen Gpu Architecture Kernel Driver +1
Name of the Vulnerable Software and Affected Versions: Valhall GPU Kernel Driver versions r48p0 through r49p1, versions r50p0 through r52p0 Arm 5th Gen GPU Architecture Kernel Driver versions r48p0 through r49p1, versions r50p0 through r52p0 Description: The issue allows a local non-privileged us...
PT-2025-16244 · Pegasystems · Pega Platform
Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.2.1 through Infinity 24.2.1 Description: The issue is related to an XSS problem with Mashup in Pega Platform. Recommendations: For Pega Platform versions 7.2.1 through Infinity 24.2.1, consider disabling the Mashup...
PT-2025-1997
Name of the Vulnerable Software and Affected Versions WordPress Email Newsletter WordPress plugin versions 1.1 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page...
PT-2025-2074
Name of the Vulnerable Software and Affected Versions The WordPress Google Map Professional Map In Your Language WordPress plugin versions 1.0 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before...
PT-2025-4065 · Wondershare · Wondershare Dr.Fone
Name of the Vulnerable Software and Affected Versions: Wondershare Dr.Fone version 13.5.21 Description: A privilege escalation vulnerability has been found in Wondershare Dr.Fone. This issue could allow an attacker to escalate privileges by replacing the binary...
PT-2025-2256 · WordPress · Wp Image Uploader
Name of the Vulnerable Software and Affected Versions: WP Image Uploader plugin for WordPress version 1.0.1 and earlier Description: The issue is related to insufficient file path validation in the gky image uploader main function function, allowing unauthenticated attackers to delete arbitrary...
PT-2025-4032 · Embedai · Embedai
Name of the Vulnerable Software and Affected Versions: EmbedAI versions 2.1 and earlier Description: A control access issue has been identified, allowing an authenticated attacker to exploit the "/embedai/visits/show/" endpoint to obtain information about visits made by other users. The informati...
CBL Mariner 2.0 Security Update: xerces-c (CVE-2024-23807)
The version of xerces-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered...
nvme-pci: fix race condition between reset and nvme_dev_disable()
...