CVE-2025-31177

gnuplot is affected by a heap buffer overflow at function utf8copyone. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2025-31176

A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash. Mitigation Currently, no mitigation is available for this vulnerability...

CVE-2024-12910

A flaw was found in the run-llama/llamaindex repository. This vulnerability allows an attacker to cause a denial of service DoS by controlling a URL variable to contain the root URL, leading to infinite recursive calls to the getarticleurls method and exhausting system resources. Mitigation...

CVE-2024-10096

A flaw was found in the Dask Distributed Server. This vulnerability allows remote code execution via pickle serialization, enabling attackers to craft and send malicious objects for deserialization on the server. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2025-2487

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it...

PT-2025-5393 · Unknown · Rstheme Ultimate Coming Soon & Maintenance

Name of the Vulnerable Software and Affected Versions: RSTheme Ultimate Coming Soon & Maintenance versions 1.0.0 through 1.0.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions 1.0.0 through 1.0.9,...

CVE-2024-11029

A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the...

PT-2024-36328 · Unknown · Gaxx Keywords

Name of the Vulnerable Software and Affected Versions: Gaxx Keywords versions n/a through 0.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

CVE-2024-12369

A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with t...

PT-2024-26583

Name of the Vulnerable Software and Affected Versions Church Admin versions n/a through 4.3.6 Description The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially trick the server into making unauthorized requests, leading to various malicious outcomes...

PT-2024-12950 · Unknown · Multi-Column Tag Map

Name of the Vulnerable Software and Affected Versions: Multi-column Tag Map versions n/a through 17.0.26 Description: The issue is related to a Missing Authorization vulnerability in the Multi-column Tag Map. Recommendations: For versions n/a through 17.0.26, update to a version later than 17.0.2...

CVE-2024-20954

A vulnerability was found in GraalVM and Mandrel Community Edition. Successful attacks of this vulnerability can result in unauthorized read access. Mitigation No current mitigation is available for this vulnerability...

PT-2024-24075 · Unknown · The Events Calendar

Name of the Vulnerable Software and Affected Versions: The Events Calendar versions n/a through 6.3.0 Description: A Cross-Site Request Forgery CSRF issue has been identified. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the us...

PT-2024-24581 · Unknown · Wptravelly

Name of the Vulnerable Software and Affected Versions: WpTravelly versions 1.6.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent. Recommendations: For versio...

Exploit for Improper Access Control in Adobe Coldfusion

CVE-2024-20767 CVE-2024-20767https://nvd.nist.gov/vuln...

PT-2024-21726 · Jean David Daviet · Download Media

Name of the Vulnerable Software and Affected Versions: Download Media versions n/a through 1.4.2 Description: The issue is related to a Missing Authorization vulnerability in Jean-David Daviet Download Media. Recommendations: For Download Media versions n/a through 1.4.2, update to a version late...

CVE-2023-52449

A NULL pointer dereference was found in the Linux kernel. This issue is caused by the ftl notifier in gluebiread and may lead to a crash. Mitigation No mitigation is currently available for this vulnerability. Make sure to perform the updates as they become available...

PT-2024-14434 · Unknown · Republish Old Posts

Name of the Vulnerable Software and Affected Versions: Republish Old Posts versions n/a through 1.21 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application tha...

PT-2023-29876 · Themify · Themify Ultra

Name of the Vulnerable Software and Affected Versions: Themify Ultra versions through 7.3.5 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects Themify Ultra. No information is provided about the estimated number of potentially affected devices...

CVE-2023-26364

A flaw was found in Adobe CSS Tools. An improper input validation could result in a minor denial of service while parsing a malicious CSS with the parse component. User interaction and privileges are not required to jeopardize an environment. Mitigation No mitigation is yet available for this...