13073 matches found
MINI-VC3G-WHVV-HJ47
Bulletin has no description...
MINI-34Q6-M8G2-W2H6
Bulletin has no description...
MINI-22FV-GVMM-QQV2
Bulletin has no description...
BIT-GITLAB-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...
BIT-GITLAB-2025-4972 Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated users with invitation privileges to bypass group-level user invitation restrictions by manipulating group invitation functionality...
MINI-VJ3R-PFCR-96G9
Bulletin has no description...
WordPress Affiliate Reviews plugin <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via numColumns Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via numColumns Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Affiliate Reviews versions = 1.0.6...
WordPress Brandfolder plugin <= 5.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Brandfolder versions = 5.0.19...
WordPress Fusion Builder plugin <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Fusion Builder versions = 3.12.1...
PT-2025-29805 · Unknown · Funnelkit Funnel Builder
Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...
Adobe InCopy Heap Buffer Overflow Vulnerability
InCopy is a professional typesetting software from Adobe for editing and designing complex layouts. A heap buffer overflow vulnerability exists in InCopy 20.3, 19.5.3 and earlier versions. An attacker can exploit this vulnerability to cause arbitrary code to be executed in the current user contex...
PT-2025-29811 · Unknown · Shinetheme Traveler
Name of the Vulnerable Software and Affected Versions: shinetheme Traveler affected versions not specified Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for potential SQL injection attacks...
MINI-V5J3-R2MP-R52Q
Bulletin has no description...
CVE-2025-50107
...
CVE-2025-53023
...
CVE-2025-50102
...
CVE-2025-50101
CVE-2025-50101 is a MySQL Server (Optimizer) vulnerability affecting MySQL versions 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. It enables a high-privilege attacker with network access via multiple protocols to cause a hang or a complete DoS. The connected IBM Guardium advisory confirms CVE-2025-...
CVE-2025-50092
...