12580 matches found
PT-2025-29746 · Nanbu · Nanbu Welcart E-Commerce
Name of the Vulnerable Software and Affected Versions: nanbu Welcart e-Commerce versions through 2.11.16 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This can potentially lead to the...
PT-2025-29803 · Arisoft · Arisoft Contact Form 7 Editor Button
Name of the Vulnerable Software and Affected Versions: arisoft Contact Form 7 Editor Button versions through 1.0.0 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious...
PT-2025-29789 · Unknown · Coschool Lms
Name of the Vulnerable Software and Affected Versions: CoSchool LMS versions n/a through 1.4.3 Description: A deserialization of untrusted data issue exists in CoSchool LMS, allowing for object injection. Recommendations: Update CoSchool LMS to a version later than 1.4.3...
PT-2025-29734 · Themeisle · Hestia
Name of the Vulnerable Software and Affected Versions: Hestia versions through 3.2.10 Description: A missing authorization issue exists in ThemeIsle Hestia, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update Hestia to a version later th...
PT-2025-29781 · Unknown · Md Yeasin Ul Haider Url Shortener
Name of the Vulnerable Software and Affected Versions: Md Yeasin Ul Haider URL Shortener versions through 3.0.7 Description: The software contains a missing authorization flaw that allows access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update Md...
PT-2025-29878 · Tp Link · Archer C1200
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C1200 versions prior to 1.1.6 Description: A clickjacking issue exists in the web management page of the TP-Link Archer C1200. This allows an attacker to deceive users into performing actions they did not intend through the...
PT-2025-29815 · Unknown · Ezihosting Tennis Court Bookings
Name of the Vulnerable Software and Affected Versions: EZiHosting Tennis Court Bookings versions through 1.2.7 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows an attacker to inject...
PT-2025-29728 · Unknown · Kerfred Fg Drupal To Wordpress
Name of the Vulnerable Software and Affected Versions: Kerfred FG Drupal to WordPress versions n/a through 3.90.0 Description: A Server-Side Request Forgery SSRF vulnerability exists in Kerfred FG Drupal to WordPress, allowing Server Side Request Forgery. Recommendations: Update Kerfred FG Drupal...
CVE-2025-53905 Vim has path traversial issue with tar.vim and special crafted tar files
Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...
Measured is vulnerable to Path Traversal attacks during class initialization
Impact A path traversal vulnerability exists where an attacker with access to manipulate inputs when initializing the Measured::Cache::Json class would be able to instruct the library to read arbitrary files. Patches Users should update to the latest version...
GHSA-29G5-M8V7-V564 Measured is vulnerable to Path Traversal attacks during class initialization
Impact A path traversal vulnerability exists where an attacker with access to manipulate inputs when initializing the Measured::Cache::Json class would be able to instruct the library to read arbitrary files. Patches Users should update to the latest version...
RHSA-2025:11048 Red Hat Security Advisory: rsync security update
Bulletin has no description...
RHSA-2025:11043 Red Hat Security Advisory: python3.11-setuptools security update
Bulletin has no description...
RHSA-2025:10981 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 security update
Bulletin has no description...
RHSA-2025:10978 Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, kpatch-patch-5_14_0-70_132_1, and kpatch-patch-5_14_0-70_85_1 security update
Bulletin has no description...
RHSA-2025:10977 Red Hat Security Advisory: kpatch-patch-4_18_0-553, kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, and kpatch-patch-4_18_0-553_53_1 security update
Bulletin has no description...
RHSA-2025:10926 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
Bulletin has no description...
RHSA-2025:10924 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
Bulletin has no description...