CVE-2025-24970 vulnerabilities

Vulnerabilities for packages: apicurio-registry, opensearch, flyway, apache-nifi, tez, zookeeper, selenium, management-api-for-apache-cassandra-5.0, logstash, cassandra-reaper, docker-selenium, apache-pulsar, wildfly, apache-activemq-artemis, celeborn, trino, kserve-modelmesh, keycloak, akhq,...

GHSA-4G8C-WM8X-JFHW vulnerabilities

Vulnerabilities for packages: apicurio-registry, opensearch, flyway, apache-nifi, tez, zookeeper, selenium, management-api-for-apache-cassandra-5.0, logstash, cassandra-reaper, docker-selenium, apache-pulsar, wildfly, apache-activemq-artemis, celeborn, trino, kserve-modelmesh, keycloak, akhq,...

CVE-2024-56278

Improper Control of Generation of Code 'Code Injection' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through = 2.9.1...

CVE-2024-50519

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Josh Kohlbach Jigoshop – Store Exporter jigoshop-exporter allows Reflected XSS.This issue affects Jigoshop – Store Exporter: from n/a through = 1.5.8...

CVE-2024-5637

The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'removefiles' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to use path...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, karma-fips, rancher-loglevel, grpc-health-probe, nats, dataplaneapi, flux-image-automation-controller, flux-image-automation-controller-fips, redka, bank-vaults-fips, vault-secrets-operator, minify, hubble-fips, ghaudit, lvm-driver, spark-operator-fips,...

CVE-2025-24611

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

CVE-2025-24611 WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

CVE-2025-24611 WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

CVE-2025-24611

CVE-2025-24611 : Path traversal vulnerability in Smackcoders WP Ultimate Exporter (affected: versions n/a through 2.9) allows Absolute Path Traversal due to improper pathname restriction. This can enable arbitrary file reads from the server. Root cause is failure to correctly constrain paths to r...

WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability

Arbitrary File Read vulnerability discovered by l8BL in WordPress Plugin WP Ultimate Exporter versions = 2.9...

WordPress plugin WP Ultimate Exporter 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2025-5446 · Smackcoders · Smackcoders Wp Ultimate Exporter

Name of the Vulnerable Software and Affected Versions: Smackcoders WP Ultimate Exporter versions n/a through 2.9 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows Absolute Path Traversal. This means th...

CVE-2024-11218 vulnerabilities

Vulnerabilities for packages: buildah, podman...

CVE-2024-11218 vulnerabilities

Vulnerabilities for packages: podman, buildah, prometheus-podman-exporter...

GHSA-5VPC-35F4-R8W6 vulnerabilities

Vulnerabilities for packages: podman, buildah, prometheus-podman-exporter...

OSV-2025-31 Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=389339262 Crash type: Heap-buffer-overflow READ 4 Crash state: Assimp::FBXExporter::WriteObjects Assimp::FBXExporter::ExportBinary Assimp::ExportSceneFBX...

PT-2025-19367 · Git +1 · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The software is susceptible to a heap-buffer-overflow READ issue. This occurs during the WriteObjects function within the Assimp::FBXExporter class, which is called by ExportBinary and...

CVE-2024-56278

Improper Control of Generation of Code 'Code Injection' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through = 2.9.1...

WordPress plugin WP Ultimate Exporter 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...