Huawei EulerOS: Security Advisory for gstreamer1-plugins-base (EulerOS-SA-2025-1263)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gstreamer1-plugins-base (EulerOS-SA-2025-1264)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: nextcloud-31.0.0-1.fc42

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

[SECURITY] Fedora 42 Update: OpenImageIO-2.5.16.0-6.fc42

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...

CVE-2025-28887

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 3, 2025 to March 9, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CVE-2025-2250: Improper Neutralization of Special Elements used in an SQL Command

The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress Bit File Manager 6.5.5 Race Condition / Code Injection

WordPress Bit File Manager plugin version 6.5.5 proof of concept race condition exploit that achieves remote code execution. ============================================================================================================================================= | Title : WordPress Bit File...

CVE-2025-28887

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

CVE-2025-28887 WordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

CVE-2025-28887

CVE-2025-28887 describes a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin Plugins Last Updated Column (Last Updated Column) affecting versions up to and including 0.1.3 . The issue is reported by multiple sources (NVD, CVE list, Patchstack) with a CVSS v3.1 base score of 4.3 ...

PT-2025-10931

Name of the Vulnerable Software and Affected Versions: Fastmover Plugins Last Updated Column versions 0.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows unauthorized actions to be performed on behalf of a user. This is due to inadequate...

CVE-2025-28887: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Fastmover Plugins Last Updated Column plugins-last-updated-column allows Cross Site Request Forgery.This issue affects Plugins Last Updated Column: from n/a through = 0.1.3...

VulnCheck KEV: CVE-2024-9593

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attackers to execute code on t...

CVE-2024-5667

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Featherlight.js JavaScript library versions 1.7.13 to 1.7.14 in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

org.jenkins-ci.main:jenkins-test-harness (1.539), org.jenkins-ci.main:jenkins-war (1.539) +2 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.539)

org.jenkins-ci.main:jenkins-core MAVEN version 1.539 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.539 - org.jenkins-ci.main:jenkins-war 1.539 -...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

org.jenkins-ci.main:jenkins-test-harness (1.547), org.jenkins-ci.main:jenkins-war (1.547) +1 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.547)

org.jenkins-ci.main:jenkins-core MAVEN version 1.547 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.547 - org.jenkins-ci.main:jenkins-war 1.547 -...

net.praqma:memory-map (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.485) +8 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.485)

org.jenkins-ci.main:jenkins-core MAVEN version 1.485 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =1.0.0, =1.0, =1.1 - org.jenkins-ci.modules:slave-installer 1.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...