17029 matches found
PT-2025-20084 · WordPress · Thimpress Wp Hotel Booking
Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions n/a through 2.1.9 Description: A Cross-Site Request Forgery CSRF issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/...
PT-2025-20216 · Liveagent · Liveagent
Name of the Vulnerable Software and Affected Versions: LiveAgent versions n/a through 4.4.7 Description: A Cross-Site Request Forgery CSRF issue affects the LiveAgent software. This issue allows for Cross Site Request Forgery. Recommendations: For versions n/a through 4.4.7, update to a version...
PT-2025-20149 · Unknown · Ovation Elements
Name of the Vulnerable Software and Affected Versions: Ovation Elements versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For Ovation...
PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress
Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...
PT-2025-20117 · Unknown · Contact Form Widget
Name of the Vulnerable Software and Affected Versions: Contact Form Widget versions 1.4.6 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Contact Form Widget, allowing unauthorized requests. Recommendations: For versions 1.4.6 and earlier, update to a version that...
CVE-2025-47420
The CVE-2025-47420 entry applies to Crestron Automate VX, affecting versions 5.6.8161.21536 through 6.4.0.49. The vulnerability is a privilege escalation in the Automate VX component, with a network-exposed attack surface and low privileges required, according to the CVSS data. Remediation guidan...
CVE-2025-0649 Stack Exhaustion In Tensorflow Serving
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...
GHSA-58XC-HPVQ-8473 Redox UEFI Safe API can cause heap-buffer-overflow
ffi::nstr should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow...
CVE-2025-46736 Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds a...
CVE-2025-32022 Finit has heap based buffer overwrite in urandom.so plugin
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...
BELL-CVE-2023-53143
Bulletin has no description...
BELL-CVE-2023-53139
Bulletin has no description...
BELL-CVE-2023-53132
Bulletin has no description...
BELL-CVE-2023-53110
Bulletin has no description...
BELL-CVE-2023-53086
Bulletin has no description...
BELL-CVE-2023-53099
Bulletin has no description...
BELL-CVE-2023-53126
Bulletin has no description...
BELL-CVE-2023-53106
Bulletin has no description...