13120 matches found
WordPress Fusion Builder plugin <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Fusion Builder versions = 3.12.1...
PT-2025-29811 · Unknown · Shinetheme Traveler
Name of the Vulnerable Software and Affected Versions: shinetheme Traveler affected versions not specified Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for potential SQL injection attacks...
Adobe InCopy Heap Buffer Overflow Vulnerability
InCopy is a professional typesetting software from Adobe for editing and designing complex layouts. A heap buffer overflow vulnerability exists in InCopy 20.3, 19.5.3 and earlier versions. An attacker can exploit this vulnerability to cause arbitrary code to be executed in the current user contex...
PT-2025-29805 · Unknown · Funnelkit Funnel Builder
Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...
MINI-V5J3-R2MP-R52Q
Bulletin has no description...
CVE-2025-50107
...
CVE-2025-53023
...
CVE-2025-50102
...
CVE-2025-50101
CVE-2025-50101 is a MySQL Server (Optimizer) vulnerability affecting MySQL versions 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. It enables a high-privilege attacker with network access via multiple protocols to cause a hang or a complete DoS. The connected IBM Guardium advisory confirms CVE-2025-...
CVE-2025-50092
...
CVE-2025-50087
...
CVE-2025-50080
...
CVE-2025-50077
...
CVE-2025-50079
...
CVE-2025-50071
CVE-2025-50071 is a vulnerability in Oracle E-Business Suite, specifically Oracle Applications Framework (Web Utilities). Affected versions are 12.2.3–12.2.14. A low-privileged, network-accessible attacker (via HTTP) can compromise the framework, potentially enabling unauthorized update/insert/de...
CVE-2025-50065
...
CVE-2025-50061
...
CVE-2025-30762
CVE-2025-30762 affects Oracle WebLogic Server (Oracle Fusion Middleware), component: Core. Affected versions are 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability enables an unauthenticated attacker over network access via T3 or IIOP to compromise WebLogic Server, potentially leading to u...