24490 matches found
CVE-2025-9875
CVE-2025-9875 affects the WordPress plugin Event Tickets, RSVPs, Calendar (TicketSpot shortcode). The vulnerability is a Stored Cross‑Site Scripting (XSS) flaw caused by insufficient input sanitization and output escaping on user‑supplied attributes, present in all versions up to and including 1....
CVE-2025-11211
creationtimestamp| type| source ---|---|--- 2025-10-03 10:34:09+00:00| seen| https://bsky.app/profile/secqube.com/post/3m2bum6ykia2u 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...
CVE-2025-61605
creationtimestamp| type| source ---|---|--- 2025-10-03 06:41:39+00:00| seen| https://gist.github.com/Darkcrai86/2ea90ea2407ec85886f0723fe0422fac...
PT-2025-40502
Name of the Vulnerable Software and Affected Versions Event Tickets, RSVPs, Calendar versions up to and including 1.0.2 Description The Event Tickets, RSVPs, Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'ticket spot' shortcode. This is due to inadequate...
WordPress plugin Event Tickets, RSVPs, Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in the use of memory after it is freed, allowing a hacker to execute arbitrary code.
The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SUSE CVE-2025-59537
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate client...
SUSE CVE-2025-59538
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...
CVE-2025-54087
creationtimestamp| type| source ---|---|--- 2025-10-02 21:05:20+00:00| seen| Telegram/hDvJHLmSNVu3V9eJC1bSqaO9RIuKLILmfH-SB30JZRW4Y...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CLSA-2025-1759432250 kernel: Fix of 36 CVEs
ASoC: topology: Clean up route loading CVE-2024-41069 - ASoC: topology: Fix references to freed memory CVE-2024-41069 - drm/dpmst: Fix MST sideband message body length check CVE-2024-56616 - Bluetooth: L2CAP: Fix not validating setsockopt user input CVE-2024-35965 - Bluetooth: L2CAP:...
CVE-2025-59758
creationtimestamp| type| source ---|---|--- 2025-10-02 15:02:15+00:00| seen| Telegram/6ApjdEuV3ZAIbav3yfDVOiVEF77HIvFUprp7TONp3KDk...
CVE-2025-59762
creationtimestamp| type| source ---|---|--- 2025-10-02 15:02:11+00:00| seen| Telegram/oqLCdULgGGB3ZdHksBH52UBb7COrogwW4wD8FXHM4Tmwja0...
CVE-2025-59773
creationtimestamp| type| source ---|---|--- 2025-10-02 15:01:55+00:00| seen| Telegram/oVQDl4yU1jhuzlUT4NhGJUAXPA-885q9PS4j0ENbs9Q8N8...
CVE-2025-40990
creationtimestamp| type| source ---|---|--- 2025-10-02 10:59:51+00:00| seen| Telegram/0y11frZqpNMcR3OQ8t85rK8Oqkjo0-rLF8Tg0blE-woY...
can: j1939: implement NETDEV_UNREGISTER notification handler
...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
