40676 matches found
EUVD-2025-34506
Not used...
EUVD-2025-34504
Not used...
EUVD-2025-34499
Not used...
EUVD-2025-34498
Not used...
EUVD-2025-34501
Not used...
EUVD-2025-34500
Not used...
EUVD-2025-34505
Not used...
EUVD-2025-34502
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...
EUVD-2025-34490
Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a...
EUVD-2025-34489
Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate ...
EUVD-2025-34488
Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate to a crafted we...
The vulnerability of the OLE Document File Allocation Table Parser component of the MS-Word catdoc text extraction program allows a hacker to execute arbitrary code.
The vulnerability of the OLE Document File Allocation Table Parser component of the MS-Word catdoc file extraction tool is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files allows a perpetrator to execute arbitrary code.
The vulnerability of the OLE Document DIFAT Parser component of the program for extracting readable text from MS-Word catdoc files is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2025-62375: Improper Certificate Validation
go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...
CVE-2025-49552 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate ...
JLSEC-2025-41 In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to...
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...
JLSEC-2025-54 In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in `build_model` via...
In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...
JLSEC-2025-59 libexpat through 2.5.0 allows recursive XML Entity Expansion if `XML_DTD` is undefined at compile...
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...
EUVD-2025-34151
ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...
AZL-70550 CVE-2025-11731 affecting package libxslt for versions less than 1.1.34-9
A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads...