37709 matches found
PT-2025-43806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through = 8.7.15...
PT-2025-43798
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-Based XSS.This issue affects Bulk Auto Image Title Attribute: from n/a through = 2.0.1...
[SECURITY] [DLA 4350-1] tika security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4350-1 [email protected] https://www.debian.org/lts/security/ Paride Legovini October 26, 2025 https://wiki.debian.org/LTS -...
Fedora 41 : perl-YAML-Syck (2025-568b5b6ddc)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-568b5b6ddc advisory. This update addresses a flaw in which processing a specially-crafted YAML document could lead to accessing information outside of the document itself and hen...
OESA-2025-2520 poppler security update
is a PDF rendering library. Security Fixes: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.CVE-2025-43903...
Cross-site Scripting (XSS)
com.liferay, com.liferay.dynamic.data.mapping.form.field.type is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper validation of user-supplied input in "Rich Text" type fields within web content structures, document types, or custom assets using the Data Engine module,...
EUVD-2025-35783
Not used...
EUVD-2025-35782
Not used...
EUVD-2025-35778
Not used...
EUVD-2025-35785
Not used...
EUVD-2025-35784
Not used...
EUVD-2025-35780
Not used...
EUVD-2025-35781
Not used...
EUVD-2025-35779
Not used...
CBK Soft EnVision 安全漏洞
CBK Soft EnVision is an enterprise document management system from CBK Soft, Turkey. A security vulnerability exists in versions prior to CBK Soft EnVision 250566 that stems from observable differences and exposure of sensitive information that could lead to account footprint identification...
EUVD-2025-35732
Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6...
CVE-2025-49923
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...
EUVD-2025-35640
Not used...