CVE-2023-5648

In Brocade ASCG versions prior to v3.0 , several security-related HTTP Headers are missing across various URL paths. This oversight allows unauthenticated attackers to perform various attacks, including Cross-Site Scripting (XSS) , Clickjacking , and Information disclosure . The vulnerability is ...

CVE-2023-50462

The Content Consent (content_consent) extension for TYPO3 , versions through 2.0.1 , suffers from an Insecure Direct Object Reference (IDOR) . The plugin fails to verify whether a specified content element identifier is permitted, allowing an unauthenticated user to display various content elemen...

CVE-2024-32949

Technical details for CVE-2024-32949 are not provided in the supplied documents. No product/version/root-cause/impact/fix specifics are available here. Monitor for official updates from CVE records or vendor advisories.

CVE-2025-6718

creationtimestamp| type| source ---|---|--- 2025-07-18 08:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua36uicgr2t...

Python DoS Vulnerability (Jun 2025) - Windows

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

MINI-2H85-2R6W-Q4RM

Bulletin has no description...

CVE-2023-7086

The SVG Uploads Support WordPress plugin, versions 2.1.1 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize uploaded SVG files, which allows users with privileges as low as Author to upload malicious SVG files containing XSS payloads. While ...

CVE-2023-6786

The Payment Gateway for Telcell WordPress plugin, in versions 2.0.1 and earlier , is vulnerable to an Open Redirect issue. The root cause is the lack of validation on the api_url parameter before the application redirects a user to its value. This allows unauthenticated attackers to redirect user...

CVE-2023-5934

The Travelpayouts: All Travel Brands in One Place WordPress plugin versions prior to 1.1.13 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when importing settings from the v1 source. This vulnerability could allow an attacker to trick a logged...

MozillaFirefox-138.0-1.1 on GA media (moderate)

MozillaFirefox-138.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15045-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4085 CVE-2025-4086 CVE-2025-4087 CVE-2025-4088 CVE-2025-4089 CVE-2025-4090 CVE-2025-4091 CVE-2025-4092 CVSS scores: CVE-2025-2817 SU...

openSUSE Security Advisory (openSUSE-SU-2025:0139-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3738 Google Optimize - Critical - Unsupported - SA-CONTRIB-2025-039

Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...

Ubuntu: Security Advisory (USN-7429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tomcat-9.0.102-1.1 on GA media (moderate)

tomcat-9.0.102-1.1 on GA media Announcement ID: openSUSE-SU-2025:14911-1 Rating: moderate Cross-References: CVE-2024-52317 CVSS scores: CVE-2024-52317 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2024-52317 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...

GHSA-FRXM-VM48-5QF2

creationtimestamp| type| source ---|---|--- 2025-03-03 19:46:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114100218515671455 2025-03-03 20:30:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6273...

openSUSE Security Advisory (SUSE-SU-2024:2814-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (openSUSE-SU-2025:0033-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:0406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-20881

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjc3g2t27 2025-02-14 10:05:00+00:00| seen| Telegram/e1-Gxr6paBZbjK9ljluKlm9rGOdxixIxNi6jfJkeSD2aDhCG...