CVE-2022-49075: Integer Overflow or Wraparound

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in qgroupreservedata to record how many bytes we set for EXTENTQGROUPRESERVED state. Currently the byteschanged is set as "unsigned int", and...

CVE-2025-26928

Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Limit for WooCommerce: from n/a through = 3.0.2...

CVE-2025-26991 WordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ollybach WPPizza wppizza allows Reflected XSS.This issue affects WPPizza: from n/a through = 3.19.4...

CVE-2025-26928

CVE-2025-26928: Missing Authorization in Order Limit for WooCommerce (Order Limit for WooCommerce plugin) affects versions up to and including 3.0.2. Documented in Wordfence Intelligence, it is labeled as a Missing Authorization vulnerability; remediation is to apply the patch/upgrade that fixes ...

PT-2025-7851 · Woocommerce · Order Limit For Woocommerce

Name of the Vulnerable Software and Affected Versions: Order Limit for WooCommerce versions 3.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin, which allows exploitation due to incorrectly configured access contro...

CVE-2025-26928: Missing Authorization

Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Limit for WooCommerce: from n/a through = 3.0.2...

WordPress plugin “Order Limit for WooCommerce” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2024-12916

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

CVE-2024-12916

CVE-2024-12916 concerns an SQL Injection in Agito Computer’s Life4All before 10.01.2025. Connected sources confirm the root cause is improper neutralization of special elements in SQL commands, affecting Life4All installations prior to the stated version. The CVSS metrics indicate high impact acr...

WhatsUp Gold File.OpenText() Unauthorized Access

The vulnerability of the File.OpenText function in the WhatsUp Gold network infrastructure monitoring system is related to an incorrect limitation on the path name to the restricted directory when processing the xmlName parameter. Exploiting this vulnerability can allow a malicious actor to gain...

CVE-2025-22631

CVE-2025-22631 : WordPress Marketing Automation plugin (up to v1.2.6.8) vulnerable to Reflected XSS due to improper input neutralization during web-page generation. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L; base score 7.1 (HIGH). Patched status exists per sources; remediation/version ...

WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Order Limit for WooCommerce versions = 3.0.2...

OESA-2025-1163 python-jwcrypto security update

Implements JWK, JWS, JWE specifications with python-cryptography Security Fixes: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression...

Abseil security vulnerability

Abseil is an Abseil generic library C++ open-sourced by Abseil. Abseil has a security vulnerability that stems from a buffer overflow problem caused by the size constructor, reserve and rehash methods of absl::flat,nodehashset,map not imposing an upper limit on its size parameter...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD CVE-2024-49994 In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path CVE-2024-50014 In the Linux...

Namada-apps allows Excessive Computation in Mempool Validation

Impact A malicious transaction may cause an expensive computation in mempool validation. A transaction with multiple repeated sections causes the section hash calculation used for signature validation to grow exponentially and potentially even cubic in proportion to number of sections. This may b...

PT-2025-7549 · Lsquic · Lsquic

Name of the Vulnerable Software and Affected Versions: LSQUIC versions prior to 4.2.0 Description: A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source...

bind security update

32:9.11.36-16.4 - Change patches applying to use -P parameter 32:9.11.36-16.3 - Limit additional section records CPU processing CVE-2024-11187 - Correct ANY queries to not have additional data appended...

CVE-2023-51297

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...