32362 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-6191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML...
PT-2025-32449 · Undefined · Undefined
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: FX80 and FX90 Vulnerability: Dependency on Vulnerable Third-Party Component 2. RISK EVALUATION... CVE-2025-43867 Source:...
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media Announcement ID: openSUSE-SU-2025:15424-1 Rating: moderate Cross-References: CVE-2015-7561 CVE-2016-9962 CVE-2017-1000056 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002101 CVE-2018-16733 CVE-2018-19184 CVE-2019-1002100 CVE-2019-1002101...
WordPress Eventin plugin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover vulnerability
Authenticated Contributor+ Privilege Escalation via User Email Change/Account Takeover vulnerability discovered by István Márton in WordPress Plugin Eventin versions = 4.0.34...
CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...
EUVD-2025-23988
A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. The attack may be launched remotely. The exploit has been...
WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability
WordPress GravityWP - Merge Tags = 1.4.4 - Local File Inclusion Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin GravityWP - Merge Tags versions = 1.4.4...
WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Peter Thaleikis in WordPress Plugin FundEngine versions = 1.7.4...
WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin IDonatePro versions = 2.1.9...
Linux Distros Unpatched Vulnerability : CVE-2025-6554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium securit...
PT-2025-32340 · Unknown · Antabot White-Jotter
Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter version 0.22 Description: A critical vulnerability exists in Antabot White-Jotter 0.22. This issue affects the CookieRememberMeManager function within the ShiroConfiguration.java file of the...
Moderate: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by h0j3n in WordPress Plugin ZoloBlocks versions = 2.3.2...
WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Easy Form Builder versions = 3.8.15...
WordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Form Block versions = 1.5.5...
WordPress SMM API plugin <= 6.0.31 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin SMM API versions = 6.0.31...
WordPress User Language Switch plugin <= 1.6.10 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin User Language Switch versions = 1.6.10...
WordPress Code Engine Plugin <= 0.3.3 - Remote Code Execution (RCE) Vulnerability
Remote Code Execution RCE Vulnerability discovered by theviper17 in WordPress Plugin Code Engine versions = 0.3.3...
CVE-2025-8581
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
