588 matches found
CVE-2026-1642 affecting package nginx for versions less than 1.28.2-1
CVE-2026-1642 affecting package nginx for versions less than 1.28.2-1. An upgraded version of the package is available that resolves this issue...
WordPress Keap Official Opt-in Forms plugin < 1.0.12 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by MINGYOUNG BAN in WordPress Plugin Keap Official Opt-in Forms versions 1.0.12...
firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...
AZL-75470 CVE-2026-24809 affecting package ntopng for versions less than 5.2.1-4
An issue from the component luaGrunerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...
Exploit for CVE-2026-22812
CVE-2026-22812 Overview A Python exploitation tool for Ope...
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10. A patched version of the package is available...
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27. A patched version of the package is available...
CVE-2025-65581
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
📄 Flowise 3.0.6 JS Parsing Injection
A JavaScript parsing injection vulnerability exists in Flowise versions prior to 3.0.6 and greater than 2.2.7-patch.1. ============================================================================================================================================= | Title : Flowise 3.0.6 JS Parsing...
CVE-2025-40819
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP4. Affected applications do not properly validate license restrictions against the database, allowing direct modification of the systemticketinfo table to bypass license limitations without proper enforcement...
firefox: thunderbird: Spoofing issue in Firefox
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox...
Siemens SIMATIC S7-1500 Improper Authentication (CVE-2023-27536)
An authentication bypass vulnerability exists libcurl 8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPTGSSAPIDELEGATION option. This vulnerability affects...
CVE-2025-13015
CVE-2025-13015 is a spoofing vulnerability in Firefox affecting Firefox < 145, Firefox ESR < 140.5, and Firefox ESR
PT-2025-46365
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description The Graphics: WebGPU component in Firefox contains incorrect boundary conditions. This issue does not have any reported real-world exploitation or estimated number of affected devices. The issue reside...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2
CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15
CVE-2025-0678 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-7039 affecting package glib for versions less than 2.71.0-6
CVE-2025-7039 affecting package glib for versions less than 2.71.0-6. A patched version of the package is available...
CVE-2025-62005
CVE-2025-62005 is a CSRF vulnerability in WordPress plugin SUMO Memberships for WooCommerce (FantasticPlugins) affecting all versions before 7.8.0. Exploitation could enable a CSRF attack against authenticated users, with the NVD/Wordfence data listing a CVSS v3.1 base score of 7.1 (High) and an ...
