13120 matches found
PT-2025-27809 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Scribunto Extension versions 1.39.0 through 1.39.11 Mediawiki - Scribunto Extension versions 1.42.0 through 1.42.6 Mediawiki - Scribunto Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improper...
CVE-2025-45809
SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...
Magnific Popups JavaScript Library < 1.2.0 - Contributor+ Stored XSS
Description Multiple plugins are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library version 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
CGA-VP5Q-G93R-42XP
Bulletin has no description...
CVE-2025-38092 ksmbd: use list_first_entry_or_null for opinfo_get_list()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use listfirstentryornull for opinfogetlist The listfirstentry macro never returns NULL. If the list is empty then it returns an invalid pointer. Use listfirstentryornull to check if the list is empty...
CGA-P29V-5PC2-7383
Bulletin has no description...
MAL-2025-5533 Malicious code in cmr-stac (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe08a482b6fd733ff90ca659985e349edbc6676e0fc5b08d34a1bbdc825075c3 Any computer that has this package installed or running should be considered...
CGA-PM9Q-Q9WG-484R
Bulletin has no description...
MAL-2025-5574 Malicious code in queshymouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ed49fc5c8d51a6b30914c50d0accfc41ed0ff18c278024d7305959eb9a7906 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-9J3V-J798-PXGX
Bulletin has no description...
CGA-24WX-PWQ3-Q9HM
Bulletin has no description...
RHSA-2025:10187 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2025:10174 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:10161 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
RHSA-2025:10101 Red Hat Security Advisory: microcode_ctl security update
Bulletin has no description...
MAL-2025-5543 Malicious code in checkout-off-form-validation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2794bea0563c12742ee032a227b1f44559bcabd566aa8bdd5371569bde55ad32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress CSS3 Vertical Web Pricing Tables plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin CSS3 Vertical Web Pricing Tables versions = 1.9...
CGA-V9C8-GPV8-6X2C
Bulletin has no description...
