CVE-2025-29087

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concatws SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string e.g., 2MB or more, an integer overflow occurs in calculating the size of the...

MAL-2025-3137 Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-P866-V4RV-9M5G

Bulletin has no description...

CGA-GQHG-GPCG-WR45

Bulletin has no description...

CGA-9G6F-879G-7F7J

Bulletin has no description...

CGA-9FH3-FQ3M-52WV

Bulletin has no description...

WordPress Spider Elements – Addons for Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Yusuf in WordPress Plugin Spider Elements versions = 1.6.5...

BIT-JENKINS-2025-31720

A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration...

BELL-CVE-2025-21996

Bulletin has no description...

BELL-CVE-2025-22003

Bulletin has no description...

BELL-CVE-2025-22007

Bulletin has no description...

BELL-CVE-2025-3198

Bulletin has no description...

BELL-CVE-2025-22005

Bulletin has no description...

BELL-CVE-2025-22004

Bulletin has no description...

PT-2025-14946 · Unknown · Morgan Kay Chamber Dashboard Business Directory

Name of the Vulnerable Software and Affected Versions: Morgan Kay Chamber Dashboard Business Directory versions 3.3.11 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that...

CGA-FFQ2-PVG6-87V5

Bulletin has no description...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...

BIT-JOOMLA-2024-26279 [20240704] - Core - XSS in Wrapper extensions

The wrapper extensions do not correctly validate inputs, leading to XSS vectors...

BIT-JOOMLA-2023-23751 [20230102] - Core - Missing ACL checks for com_actionlogs

An issue was discovered in Joomla! 4.0.0 through 4.2.4. A missing ACL check allows non super-admin users to access comactionlogs...

BIT-JOOMLA-2023-23750 [20230101] - Core - CSRF within post-installation messages

An issue was discovered in Joomla! 4.0.0 through 4.2.6. A missing token check causes a CSRF vulnerability in the handling of post-installation messages...