178 matches found
CVE-2023-50462
The Content Consent (content_consent) extension for TYPO3 , versions through 2.0.1 , suffers from an Insecure Direct Object Reference (IDOR) . The plugin fails to verify whether a specified content element identifier is permitted, allowing an unauthenticated user to display various content elemen...
CVE-2024-32949
Technical details for CVE-2024-32949 are not provided in the supplied documents. No product/version/root-cause/impact/fix specifics are available here. Monitor for official updates from CVE records or vendor advisories.
CVE-2025-6718
creationtimestamp| type| source ---|---|--- 2025-07-18 08:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua36uicgr2t...
Python DoS Vulnerability (Jun 2025) - Windows
Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...
MINI-2H85-2R6W-Q4RM
Bulletin has no description...
CVE-2023-7086
The SVG Uploads Support WordPress plugin, in versions 2.1.1 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize uploaded SVG files, which allows users with a role as low as Author to upload malicious files containing XSS payloads. Practical c...
CVE-2023-6786
The Payment Gateway for Telcell WordPress plugin, in versions 2.0.1 and earlier , is vulnerable to an Open Redirect issue. The root cause is the lack of validation on the api_url parameter before the application redirects a user to its provided value. This flaw allows unauthenticated attackers to...
CVE-2023-5934
The Travelpayouts: All Travel Brands in One Place WordPress plugin is vulnerable to a Cross-Site Request Forgery (CSRF) attack in versions prior to 1.1.13 . The root cause is a lack of CSRF checks when importing settings from the v1 API. This allows an attacker to trick a logged-in administrator ...
MozillaFirefox-138.0-1.1 on GA media (moderate)
MozillaFirefox-138.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15045-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4085 CVE-2025-4086 CVE-2025-4087 CVE-2025-4088 CVE-2025-4089 CVE-2025-4090 CVE-2025-4091 CVE-2025-4092 CVSS scores: CVE-2025-2817 SU...
openSUSE Security Advisory (openSUSE-SU-2025:0139-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (openSUSE-SU-2025:0131-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
Ubuntu: Security Advisory (USN-7429-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
tomcat-9.0.102-1.1 on GA media (moderate)
tomcat-9.0.102-1.1 on GA media Announcement ID: openSUSE-SU-2025:14911-1 Rating: moderate Cross-References: CVE-2024-52317 CVSS scores: CVE-2024-52317 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2024-52317 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...
GHSA-FRXM-VM48-5QF2
creationtimestamp| type| source ---|---|--- 2025-03-03 19:46:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114100218515671455 2025-03-03 20:30:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6273...
openSUSE Security Advisory (SUSE-SU-2024:2814-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (openSUSE-SU-2025:0033-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:0406-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-20881
creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjc3g2t27 2025-02-14 10:05:00+00:00| seen| Telegram/e1-Gxr6paBZbjK9ljluKlm9rGOdxixIxNi6jfJkeSD2aDhCG...