32964 matches found
SUSE: Security Advisory (SUSE-SU-2025:1576-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:01638-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:1559-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:01615-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Car Dealer Theme <= 1.6.6 is vulnerable to PHP Object Injection
Software Car Dealer Type Theme Vulnerable versions = 1.6.6 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39480 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 4311ea0cfd5b Credits Bonds Required privilege Unauthenticated Publish...
WordPress Healsoul Theme <= 2.2.0 is vulnerable to Local File Inclusion
Software Healsoul Type Theme Vulnerable versions = 2.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-32309 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 703f0a241625 Credits Bonds Required privilege Unauthenticated Published...
OpenSSL 3.5.0 < 3.5.1 Vulnerability
The version of OpenSSL installed on the remote host is prior to 3.5.1. It is, therefore, affected by a vulnerability as referenced in the 3.5.1 advisory. - Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate...
SUSE: Security Advisory (SUSE-SU-2025:01620-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Photography Theme <= 7.5.2 is vulnerable to PHP Object Injection
Software Photography Type Theme Vulnerable versions = 7.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE N/A Patch priority High CVSS severity High 8.5 Developer EPC PSID 070158f14a77 Credits Rafie Muhammad Patchstack Required privilege Subscriber Published 22...
WordPress Butcher Theme <= 2.40 is vulnerable to Cross Site Scripting (XSS)
Software Butcher Type Theme Vulnerable versions = 2.40 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-32285 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fe6f8cbe33e0 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
WordPress Entrada Theme <= 5.7.7 is vulnerable to SQL Injection
Software Entrada Type Theme Vulnerable versions = 5.7.7 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2025-39484 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID ccc061900a81 Credits Bonds Required privilege Unauthenticated Published 22 May,...
WordPress Acerola Theme <= 1.6.5 is vulnerable to PHP Object Injection
Software Acerola Type Theme Vulnerable versions = 1.6.5 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-31927 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d721ad82aacb Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
openSUSE Security Advisory (SUSE-SU-2025:01591-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2025:1572-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Hot Random Image plugin <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via link Parameter vulnerability discovered by Kishan Vyas in WordPress Plugin Hot Random Image versions = 1.9.2...
WordPress Hot Random Image plugin <= 1.9.2 - Path Traversal to Authenticated (Contributor+) Limited Arbitrary Image Access via path Parameter vulnerability
Path Traversal to Authenticated Contributor+ Limited Arbitrary Image Access via path Parameter vulnerability discovered by Kishan Vyas in WordPress Plugin Hot Random Image versions = 1.9.2...
CVE-2005-4753
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, in certain "heavy usage" scenarios, report incorrect severity levels for an audit event, which might allow attackers to perform unauthorized actions and avoid detection...
WordPress Digits plugin < 8.4.6.1 - Auth Bypass via OTP Bruteforcing vulnerability
Auth Bypass via OTP Bruteforcing vulnerability discovered by Saleh Tarawneh in WordPress Plugin Digits versions 8.4.6.1...
CVE-2025-5032
CVE-2025-5032 affects Campcodes Online Shopping Portal 1.0. The vulnerability is an SQL injection in an unknown function of /admin/edit-category.php triggered by manipulating the Category parameter. It can be exploited remotely and public disclosures exist. The connected documents do not specify ...