CVE-2025-5526 BuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/Update

The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and download files belonging to another user...

CVE-2022-49442

In the Linux kernel, the following vulnerability has been resolved: drivers/base/node.c: fix compaction sysfs file leak Compaction sysfs file is created via compactionregisternode in registernode. But we forgot to remove it in unregisternode. Thus compaction sysfs file is leaked. Using...

EazyDocs < 2.3.6 - Unauthenticated OnePage Document Update/Publish

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on the doconepage and editdoconepage functions, allowing unauthenticated attackers to publish and edit the plugin's OnePage document...

Update documentation regarding plan permissions to edit and delete plans

h3. Summary According to our documentation Disabling or deleting a plan|https://confluence.atlassian.com/bamboo/disabling-or-deleting-a-plan-289276855.html/, it is only possible to delete a plan by having "Admin" Global permissions. This is not accurate. Test done: Create a group called...

The vulnerability in the `mozilla::dom::ImageDocument::UpdateSizeFromLayout` function allows a hacker to trigger a service failure in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird.

The vulnerability of the mozilla::dom::ImageDocument::UpdateSizeFromLayout function in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after object release, resulting from manipulations of DOM objects when the “resize” event is called for the “image”...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:3086-1)

This update for samba fixes the following issues: Security issues fixed : - CVE-2017-14746: Fixed a use-after-free vulnerability that could be used to crash smbd or potentially execute code bsc1060427. - CVE-2017-15275: Fixed a server heap memory information leak bsc1063008. Non-security issues...

CentOS Update for python-docs CESA-2007:1076 centos3 x86_64

Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...