13464 matches found
CVE-2025-26527
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...
UBUNTU-CVE-2025-26527
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...
CVE-2025-26527
CVE-2025-26527 concerns Moodle: non-searchable tags can be discovered by users via the tag search page or the tags block. Multiple connected sources (BIT-MOODLE-2025-26527, GHSA/GHSA-5R85-6H7F-RG3R, OSV entries) corroborate the tag exposure issue. The initial description states the risk clearly, ...
CVE-2024-12918
creationtimestamp| type| source ---|---|--- 2025-02-24 17:21:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5189 2025-02-24 17:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114060119765999360 2025-02-24 19:32:23+00:00| seen|...
WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Estatik versions = 4.3.0...
WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin System Dashboard versions = 2.8.18...
Friday Squid Blogging: New Squid Fossil
A 450-million-year-old squid fossil was dug up in upstate New York. Blog moderation policy...
WordPress Legoeso PDF Manager plugin <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter vulnerability
Authenticated Author+ SQL Injection via checkedVals Parameter vulnerability discovered by WordFence in WordPress Plugin Legoeso PDF Manager versions = 1.2.2...
Wireshark 4.2.x < 4.2.11 / 4.4.x < 4.4.4 DoS Vulnerability
The version of Wireshark installed on the remote Windows host is prior to 4.2.11 or 4.4.4. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.11 advisory. - The Bundle Protocol and CBOR dissectors could crash. Fixed in master: 83c73a83ad Fixed in release-4.4:...
Wireshark 4.2.x < 4.2.11 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.2.11. It is, therefore, affected by a vulnerability as referenced in the wireshark-4.2.11 advisory. - The Bundle Protocol and CBOR dissectors could crash. Fixed in master: 83c73a83ad Fixed in release-4.4:...
CVE-2024-57050
creationtimestamp| type| source ---|---|--- 2025-02-18 15:18:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmqzfef2o 2025-02-18 16:49:00+00:00| seen| https://t.me/cvedetector/18330 2025-02-18 17:56:05+00:00| seen|...
WordPress Uncode Core plugin <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias vulnerability
Authenticated Subscriber+ Arbitrary Shortcode Execution in uncodegetmedias vulnerability discovered by mikemyers in WordPress Plugin Uncode Core versions = 2.9.1.6...
Hackers Exploit Telegram API to Spread New Golang Backdoor
The new Golang backdoor uses Telegram for command and control. Netskope discovers malware that exploits Telegram's API for…...
Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)
During security testing, Rapid7 discovered that Xerox Versalink C7025 Multifunction printers MFPs were vulnerable to pass-back attacks. The affected products identified were: Xerox Versalink MFPs Firmware Version: 57.69.91 and earlier This issue has been assigned the following CVEs: CVE-2024-1251...
CVE-2024-29931
creationtimestamp| type| source ---|---|--- 2025-02-14 10:03:08+00:00| seen| Telegram/FBvwTKDRln5lzTWsmelM1srAbBpK2DK-1ZXTCInxL3OcopQ7 2026-01-05 13:20:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-29931.yaml 2026-01-07 21:03:20+00:00|...
Security update golang-github-prometheus-prometheus
golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 Highlights of other changes: Performance: Significant enhancements to PromQL execution speed,...
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: Added MAC based terminal naming option jscSUMA-314 golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated...
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 Highlights of other changes: Performance: Significant...
SUSE CVE-2023-45231
EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighbor Discovery Redirect message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...
