8756 matches found
ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.charlyghislain.keycloak:keycloak-importexport (>=21.0.0 <=23.0.1) +135 more potentially affected by CVE-2025-11429 via org.keycloak:keycloak-services (>=1.0-alpha-1 <=26.2.1)
org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =21.0.0, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.0.1, =1.0.2 - com.kleegroup.accelerator:accelerator-security-keycloakmfa =1.0.1 and more Source cves: CVE-2025-11429 Source advisory:...
ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0 <=0.7.0), com.charlyghislain.keycloak:keycloak-importexport (>=21.0.0 <=23.0.1) +135 more potentially affected by CVE-2025-12110 via org.keycloak:keycloak-services (>=1.0-alpha-1 <=26.2.2)
org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =21.0.0, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.4.10, =1.0.1, =1.0.2 - com.kleegroup.accelerator:accelerator-security-keycloakmfa =1.0.1 and more Source cves: CVE-2025-12110 Source advisory:...
CVE-2025-52748
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through = 2.5.5...
USN-7837-1 gst-plugins-good1.0 vulnerability
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or disclose sensitive information...
USN-7837-1: GStreamer Good Plugins vulnerability
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or disclose sensitive information...
OpenBao leaks HTTPRawBody in Audit Logs
Impact OpenBao's audit log experienced a regression wherein raw HTTP bodies used by few endpoints were not correctly redacted HMAC'd. This impacted the following subsystems: - When using the ACME functionality of PKI, this would result in short-lived ACME verification challenge codes being leaked...
CVE-2025-52748
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through = 2.5.5...
CVE-2025-49953 WordPress ShareBang, Ultimate Social Share Buttons for WordPress Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeinity ShareBang, Ultimate Social Share Buttons for WordPress sharebang allows Reflected XSS.This issue affects ShareBang, Ultimate Social Share Buttons for WordPress: from n/a through = 1.4...
PT-2025-43404
Name of the Vulnerable Software and Affected Versions OpenBao versions 2.2.0 through 2.4.1 Description OpenBao, an open source identity-based secrets management system, experienced a regression in its audit log functionality. Raw HTTP bodies from certain endpoints were not properly redacted,...
WordPress plugin Advanced Custom Fields : CPT Options Pages Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-43235
Name of the Vulnerable Software and Affected Versions e-plugins Directory Pro versions through 2.5.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Reflected Cross-site Scripting XSS condition. This allows an attacker ...
Ubuntu: Security Advisory (USN-7827-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CLSA-2025-1761082098 Fix CVE(s): CVE-2022-0547
SECURITY UPDATE: Authentication bypass in external authentication plug-ins with only partially correct credentials - debian/patches/CVE-2022-0547.patch: disallow multiple deferred authentication plug-ins - CVE-2022-0547 Update sample keys for testing - debian/sample-keys/ - debian/rules -...
BambuStudio 安全漏洞
BambuStudio is a Bambu Lab open source software that connects BambuLab to other 3D printers. A security vulnerability exists in BambuStudio version 2.1.1.52 and prior versions, which stems from the loading of a web plug-in at application startup without verifying the digital signature or...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GStreamer Base Plugins vulnerabilities (USN-7827-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7827-1 advisory. Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibl...
USN-7827-1 gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service...
USN-7827-1: GStreamer Base Plugins vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service...
openSUSE Security Advisory (SUSE-SU-2025:03629-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WhatWeb Scanner 0.6.3
WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...
