Linux Distros Unpatched Vulnerability : CVE-2021-29450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This...

Brocade SANnav Information Disclosure

The vulnerability of the Brocade SANnav network management software lies in the ability to expose system data to unauthorized individuals. Exploiting this vulnerability could allow a intruder to gain unauthorized access to protected information...

Brocade SANnav Information Disclosure

The vulnerability of the Brocade SANnav network management software lies in the ability to expose system data to unauthorized individuals. Exploiting this vulnerability could allow a intruder to gain unauthorized access to protected information...

Netgear DGND3700 Information Disclosure

The vulnerability of Netgear DGND3700 router’s built-in software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Oracle E-Business Suite Search and Register Users Unauthorized Access

The vulnerability of the “Search and Register Users” sub-component of the Oracle User Management component in the Oracle E-Business Suite system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

tarfile module CPython Unauthorized Access

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

tarfile module CPython Data Compromise

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

iOS iPadOS Information Disclosure

The vulnerability of iOS and iPadOS operating systems is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

CVE-2025-8091

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-55675

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasourceid in the URL, an attacker can...

CVE-2025-38552

In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution i...

CVE-2025-7499 BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure

The BetterDocs – Advanced AI-Driven Documentation, FAQ & Knowledge Base Tool for Elementor & Gutenberg with Encyclopedia, AI Support, Instant Answers plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getresponse function in all versions up ...

CVE-2025-5819

An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users with developer access to obtain ID tokens for protected branches under certain circumstances...

CVE-2025-8091

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-8091 EventON Lite <= 2.4.6 - Authenticated (Contributor+) Information Disclosure

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

CVE-2025-8091 EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.6 via the addsingleeventon and addeventon shortcodes due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to...

PT-2025-33465 · WordPress · Eventon Lite

Name of the Vulnerable Software and Affected Versions: EventON Lite versions prior to 2.4.7 Description: The EventON Lite plugin for WordPress is vulnerable to Information Exposure in versions prior to 2.4.7 via the add single eventon and add eventon shortcodes. Insufficient restrictions on post...

PostgreSQL Core Server Access Control Bypass Unauthorized Access

The vulnerability of the core server component of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security restrictions such as Access Control Lists and gain unauthorized access to protected...

Linux mii_nway_restart() Unauthenticated Access

The vulnerability of the miinwayrestart function in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

IBM UrbanCode Deploy Information Disclosure

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy UCD lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a perpetrator to disclose the protected information...