27431 matches found
CVE-2011-10040: Improper Neutralization of Input During Web Page Generation
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
Nagios XI security vulnerabilities
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9, which stems from insufficient...
CVE-2025-9870
creationtimestamp| type| source ---|---|--- 2025-10-29 23:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emnqcu3r2q...
CVE-2025-62402
creationtimestamp| type| source ---|---|--- 2025-10-29 19:33:03+00:00| seen| https://seclists.org/oss-sec/2025/q4/100 2025-10-29 21:09:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4eeape4oa2s 2025-10-30 12:00:40+00:00| seen|...
GHSA-9F58-4465-23C7
creationtimestamp| type| source ---|---|--- 2025-10-29 17:53:53+00:00| seen| Telegram/FcyFOIGp1355bB4pPTj-mLCS9eCskWr8JijI5t03PxSg30o...
CVE-2025-11632
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2025-11632
The WordPress plugin Call Now Button (Call Now Button – The #1 Click to Call Button for WordPress) is affected by CVE-2025-11632 due to missing capability checks in multiple functions across versions up to 1.5.4. The issue enables authenticated users with Subscriber-level access and above to gene...
CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...
CVE-2025-64229
creationtimestamp| type| source ---|---|--- 2025-10-29 09:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4d5k7qns62s...
CVE-2025-57931
creationtimestamp| type| source ---|---|--- 2025-10-29 06:05:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4crqm2euh27...
CVE-2025-62776
creationtimestamp| type| source ---|---|--- 2025-10-29 05:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4cr6p4oc624...
kernel: Linux kernel ALSA hda/ca0132 buffer overflow
This CVE has been marked as Rejected by the assigning CNA...
SUSE CVE-2025-40071
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...
PT-2025-44275
Name of the Vulnerable Software and Affected Versions Call Now Button versions prior to 1.5.5 Description The Call Now Button plugin for WordPress is susceptible to unauthorized data access because of a missing capability check in multiple functions. Attackers with Subscriber-level access or high...
CVE-2025-62796
creationtimestamp| type| source ---|---|--- 2025-10-28 23:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c57tsqrn2p...
CVE-2025-62800
creationtimestamp| type| source ---|---|--- 2025-10-28 23:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4c4wve2pa2s...
GHSA-3M8R-W7XG-JQVW
creationtimestamp| type| source ---|---|--- 2025-10-28 22:36:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454180633459870...
CVE-2025-12304
A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of t...