CVE-2025-8723

The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hookrestpredispatch method in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject...

PT-2025-34187 · Unknown · Group-Office

Name of the Vulnerable Software and Affected Versions: Group-Office versions prior to 6.8.119 Group-Office versions prior to 25.0.20 Description: Group-Office is susceptible to a path traversal vulnerability. Exploitation of this issue may lead to the exposure of information on the server hosting...

PT-2025-34307 · Uplusftp +1 · Uplusftp +1

Name of the Vulnerable Software and Affected Versions: EasyFTP Server versions 1.7.0.11 and earlier Description: EasyFTP Server versions 1.7.0.11 and earlier contain a stack-based buffer overflow in its HTTP interface. When processing a GET request to list.html, the server does not validate the...

PT-2025-34188

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.5.1 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is susceptible to unauthorized data modification. This is due to the absence of ...

PT-2025-34256 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.7 Description: WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the cargos.php endpoint of the application. This vulnerability allows attackers to...

PT-2025-34257 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.7 Description: WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the pre cadastro adotante.php endpoint. Attackers can inject malicious scripts through...

Linux Distros Unpatched Vulnerability : CVE-2023-38403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Note that Nessus relies on the...

Mozilla Firefox ESR Security Update (mfsa_2025-65) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2025-34255 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.7 Description: WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the insere despacho.php endpoint of the WeGIA application. This vulnerability allows...

TencentOS Server 3: microcode_ctl (TSSA-2025:0682)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0682 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2023-32642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient adherence to expected conventions for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an...

Linux Distros Unpatched Vulnerability : CVE-2024-23839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic...

Linux Distros Unpatched Vulnerability : CVE-2017-15424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a...

Linux Distros Unpatched Vulnerability : CVE-2019-16220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 5.2.3, validation and sanitization of a URL in wpvalidateredirect in wp- includes/pluggable.php could lead to an open redirect if a provided...

Linux Distros Unpatched Vulnerability : CVE-2024-21108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily...

Linux Distros Unpatched Vulnerability : CVE-2018-6147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2023-32651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of specified type of input for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an...

Linux Distros Unpatched Vulnerability : CVE-2023-21885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.42 and prior t...

Linux Distros Unpatched Vulnerability : CVE-2023-22100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.12. Easily...

Linux Distros Unpatched Vulnerability : CVE-2024-21116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily...