30401 matches found
CVE-2025-58335
CVE-2025-58335 affects JetBrains Junie prior to multiple build lines (252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50). The vulnerability is an information disclosure via the search_project function, wi...
CVE-2025-54714
Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through = 3.3.201...
CVE-2025-54714 WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Dylan James Zephyr Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zephyr Project Manager: from n/a through 3.3.201...
CVE-2025-54714 WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through = 3.3.201...
CVE-2025-54714
CVE-2025-54714 involves Zephyr Project Manager (WordPress plugin) with a Missing Authorization/Broken Access Control issue affecting versions through 3.3.201. Reported details include CVSS v3.1 base score 7.1 (High) with network attack vector, low privileges required, no user interaction, confide...
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust is broken? According to a recent report by Statista, the average cost of a data breach worldwide was about $4.88 million. Also, in 2024, t...
Malicious code in verizon-media-open-source-project-portal (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41612 Malicious code in verizon-media-open-source-project-portal (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2025-35115
Name of the Vulnerable Software and Affected Versions JetBrains Junie versions 243.284.50 through 252.284.66 Description An information disclosure issue exists in the search project function. Recommendations Update JetBrains Junie to a version after 252.284.66...
libbiosig stack buffer overflow vulnerability (CNVD-2025-20240)
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...
libbiosig stack buffer overflow vulnerability (CNVD-2025-20246)
libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has a stack buffer overflow vulnerability that can be exploited by an attacker to cause execution of arbitrary code...
WordPress plugin Zephyr Project Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
📄 Coolify 4.0.0-beta.420.6 Command Injection
Coolify versions prior to and including v4.0.0-beta.420.6 are vulnerable to a critical remote code execution flaw in the project deployment workflow. The platform allows authenticated users, with low-level privileges, to inject arbitrary shell commands via the Git Repository URL field during...
DRUPAL-CONTRIB-2025-104
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...
DRUPAL-CONTRIB-2025-103
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...
DRUPAL-CONTRIB-2025-102
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466s-becoming-owner-maintainer-or-co-mai...
CVE-2025-34161
Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Repository field during project creatio...
CVE-2025-34157
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting XSS attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to...
CVE-2025-34157
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting XSS attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to...
CVE-2025-34157 Coolify Stored Cross-Site Scripting (XSS) in Project Name Field
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting XSS attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to...