12583 matches found
PT-2025-14746 · Mediaview · Mediaview
Name of the Vulnerable Software and Affected Versions: MediaView versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in MediaView. Recommendations: For versions...
PT-2025-14725 · WordPress · Sandeep Kumar Wp Video Playlist
Name of the Vulnerable Software and Affected Versions: Sandeep Kumar WP Video Playlist versions 1.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For Sandee...
PT-2025-14747 · WordPress · Wpshopee Awesome Logos
Name of the Vulnerable Software and Affected Versions: wpshopee Awesome Logos versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...
PT-2025-14730 · Unknown · Rich Text Editor
Name of the Vulnerable Software and Affected Versions: Rich Text Editor versions 1.0.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Rich Text Editor, which allows exploitation of incorrectly configured access control security levels. Recommendation...
PT-2025-14794 · Netwrix · Netwrix Password Secure
Name of the Vulnerable Software and Affected Versions: Netwrix Password Secure versions 9.2 and earlier Description: The issue allows command injection. This means that an attacker could potentially execute system commands, which could lead to unauthorized access or control of the system...
PT-2025-14704 · Unknown · Wptobe-Signinup
Name of the Vulnerable Software and Affected Versions: Wptobe-signinup versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...
PT-2025-14735 · Unknown · Textme Sms
Name of the Vulnerable Software and Affected Versions: TextMe SMS versions 1.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For TextMe SMS versions 1.9.1 an...
PT-2025-14581 · WordPress · Mappress Maps
Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions prior to 2.94.9 Description: The issue concerns the MapPress Maps plugin for WordPress, where certain parameters are not properly sanitized and escaped when displayed on the page. This could allow users wi...
DSA-5892-1 atop - security update
Bulletin has no description...
CVE-2025-24269
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination...
CVE-2025-27608 Self Cross-Site Scripting in Arduino IDE
Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting XSS vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the...
RHSA-2025:3490 Red Hat Security Advisory: Satellite 6.16.4 Async Update
Bulletin has no description...
RHSA-2025:3465 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update
Bulletin has no description...
PT-2025-14566
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.2.0 through 9.2.9 Apache Traffic Server versions 10.0.0 through 10.0.4 Description The issue affects Apache Traffic Server when chunked messages are malformed, allowing request smuggling. Users are recommended ...
PT-2025-14548
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 29 through 36.2 Description The issue is related to improper input validation in the signalling component, allowing remote attackers to trigger a temporary denial of service, resulting in a software abort. Recommendatio...
PT-2025-14555 · Obfuscate · Obfuscate
Name of the Vulnerable Software and Affected Versions: Obfuscate versions 0.0.0 through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...
PT-2025-14551 · Arduino · Arduino Ide
Name of the Vulnerable Software and Affected Versions: Arduino IDE versions prior to 2.3.5 Description: A Self Cross-Site Scripting XSS vulnerability has been identified in the Arduino IDE. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences ...
PT-2025-19697 · Opensuse +1 · Govulncheck-Vulndb
Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250327T184518 Description: This update addresses multiple issues within govulncheck-vulndb. Recommendations: Update to version 0.0.20250327T184518 or later. Update to version 0.0.20250331T171002 or...
PT-2025-14512 · Jenkins · Jenkins Templating Engine Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Templating Engine Plugin versions 2.5.3 and earlier Description: The issue allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM, due to libraries defined in folders not...
