16949 matches found
PT-2025-29729 · Elementor +1 · Elementor +1
Name of the Vulnerable Software and Affected Versions: hashthemes Easy Elementor Addons versions through 2.2.5 Description: The software contains a cross-site scripting issue due to improper neutralization of input during web page generation. This allows for stored cross-site scripting attacks...
PT-2025-29757 · Tribulant · Tribulant Software Newsletters
Name of the Vulnerable Software and Affected Versions: Tribulant Software Newsletters versions n/a through 4.10 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Tribulant Software Newsletters, allowing attackers to perform actions on behalf of authenticated users. This issue...
PT-2025-29756 · WordPress · Blockswp Theme Builder For Elementor
Name of the Vulnerable Software and Affected Versions: BlocksWP Theme Builder For Elementor versions through 1.2.3 Description: The BlocksWP Theme Builder For Elementor software contains a Cross-Site Request Forgery CSRF issue. This allows for the execution of unintended actions on behalf of an...
PT-2025-29742 · Unknown · Bold Page Builder
Name of the Vulnerable Software and Affected Versions: Bold Page Builder versions through 5.4.1 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Update Bold...
PT-2025-29750 · WordPress · Antispam For Contact Form 7
Name of the Vulnerable Software and Affected Versions: AntiSpam for Contact Form 7 versions through 0.6.3 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users without their knowledge...
PT-2025-29779 · Unknown · Md Yeasin Ul Haider Url Shortener
Name of the Vulnerable Software and Affected Versions: Md Yeasin Ul Haider URL Shortener versions through 3.0.7 Description: The software contains a SQL injection flaw due to improper neutralization of special elements within SQL commands. This allows for potential SQL injection attacks...
PT-2025-29776 · Awethemes · Hillter
Name of the Vulnerable Software and Affected Versions: awethemes Hillter versions through 3.0.7 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update awethemes Hillter to a version later than 3.0.7...
PT-2025-29761 · WordPress · Toast Plugins Animator
Name of the Vulnerable Software and Affected Versions: Toast Plugins Animator versions n/a through 3.0.16 Description: A Cross-Site Request Forgery CSRF issue exists in Toast Plugins Animator. This allows attackers to perform actions on behalf of unsuspecting users. Recommendations: Update Toast...
File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089
The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views. The File Download module...
CVE-2025-30761
CVE-2025-30761 is reported in Oracle Java SE and GraalVM family (component: Scripting) with affected Oracle Java SE versions 8u451, 8u451-perf, 11.0.27 and Oracle GraalVM Enterprise Edition 21.3.14; and is echoed across various Linux advisories (ALAS2, ALAS2CORRETTO8, etc.). Connected documents p...
CVE-2025-49841 GHSL-2025-053: GPT-SoVITS Deserialization of Untrusted Data vulnerability
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in processckpt.py. The SoVITSdropdown variable takes user input and passes it to the loadsovitsnew function in processckpt.py. In loadsovitsnew, the...
CVE-2025-50088
...
CVE-2025-50082
CVE-2025-50082 is a MySQL Server (Oracle) vulnerability affecting the Server: Optimizer component. Affected versions are 8.0.0–8.0.42, 8.4.0–8.4.5, 9.0.0–9.3.0 . The flaw allows a low-privilege remote attacker (network access via multiple protocols) to cause a hang or a frequent crash (complete D...
CVE-2025-50069
CVE-2025-50069 affects the Java VM component of Oracle Database Server. Affected versions are 19.3–19.27 and 21.3–21.18. An attacker with Create Session and Create Procedure privileges and network access via Oracle Net can exploit the Java VM to gain unauthorized access to data or data across all...
CVE-2025-50062
The CVE-2025-50062 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Core (Global Payroll for Core) with affected versions 9.2.51–9.2.52. Multiple connected sources describe a vulnerability where a low-privileged attacker with network access over HTTP can compromise the system, enabl...
CVE-2025-30753
CVE-2025-30753 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affects WebLogic versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause a hang or frequent crashes (complete DOS). No pu...
RHSA-2025:11045 Red Hat Security Advisory: kernel security update
Bulletin has no description...
BELL-CVE-2024-47252
Bulletin has no description...