16951 matches found
Grafana Labs 11.1.0 < 11.2.8+security-01, 11.3.5+security-01, 11.4.3+security-01, 11.5.3+security-01, 11.6.0+security-01 XSS (CVE-2025-2703)
The version of Grafana Labs installed on the remote host is affected by cross-site scripting vulnerability as referenced in the CVE-2025-2703 advisory. - The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order t...
PT-2025-27898
Name of the Vulnerable Software and Affected Versions: aonetheme Service Finder Booking versions n/a through 6.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in the aonetheme Service Finder Booking, allowing Privilege Escalation. Recommendations: For versio...
PT-2025-27900 · Woocommerce · Printcart Web To Print Product Designer
Name of the Vulnerable Software and Affected Versions: Printcart Web to Print Product Designer for WooCommerce versions prior to 2.4.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL...
CVE-2025-52496
Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...
MAL-2025-5604 Malicious code in n8n-nodes-zalo-tools-vts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2329810f2a1823ea41018ebaecc3088d17c44d6b40443b63ba8cf17463f898a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-49826 Next.js DoS vulnerability via cache poisoning
Next.js is a React framework for building full-stack web applications. From versions 15.0.4-canary.51 to before 15.1.8, a cache poisoning bug leading to a Denial of Service DoS condition was found in Next.js. This issue does not impact customers hosted on Vercel. Under certain conditions, this...
BELL-CVE-2025-6491
Bulletin has no description...
BELL-CVE-2025-1735
Bulletin has no description...
BELL-CVE-2025-38158
Bulletin has no description...
BELL-CVE-2025-38162
Bulletin has no description...
BELL-CVE-2025-38138
Bulletin has no description...
BELL-CVE-2025-38142
Bulletin has no description...
BELL-CVE-2025-38135
Bulletin has no description...
BELL-CVE-2025-38148
Bulletin has no description...
BELL-CVE-2025-38157
Bulletin has no description...
BELL-CVE-2025-38146
Bulletin has no description...
BELL-CVE-2025-38119
Bulletin has no description...
BELL-CVE-2025-38126
Bulletin has no description...