13120 matches found
CVE-2025-29512
Cross-Site Scripting XSS vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database...
CGA-RMQP-W7PW-6PC6
Bulletin has no description...
GHSA-QHP6-VP7C-G7XP Liferay Cross-site Scripting vulnerability
A stored cross-site scripting XSS vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10...
RHSA-2025:3961 Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_85_1 security update
Bulletin has no description...
CGA-29XQ-737Q-CJ72
Bulletin has no description...
WordPress Debug Log Manager plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Martino Spagnuolo in WordPress Plugin Debug Log Manager versions = 2.3.4...
BELL-CVE-2025-22018
Bulletin has no description...
BELL-CVE-2025-22020
Bulletin has no description...
CVE-2025-29661
Litepubl CMS = 7.0.9 is vulnerable to RCE in admin/service/run...
Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled...
WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability
Privilege Escalation Vulnerability discovered by LVT-tholv2k in WordPress Plugin Xelion Webchat versions = 9.1.0...
CVE-2025-22080 fs/ntfs3: Prevent integer overflow in hdr_first_de()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The "deoff" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINTMAX - 16 then the check does...
SUSE-SU-2025:1330-1 Security update for rsync
This update for rsync fixes the following issues: - Fixed bwlimit=0 option broken by CVE-2024-12088 fix bsc1239649...
RHSA-2025:3935 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:3903 Red Hat Security Advisory: kernel security update
Bulletin has no description...
GHSA-H4RR-F37J-4HH7 Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived...
GHSA-J639-M367-75CF Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activateai override property to a post via the Wrangler plugin, provided...
Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activateai override property to a post via the Wrangler plugin, provided...
PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...