CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2011-10040 Nagios XI < 2011R1.9 XSS via Status/Report Page Link Functions

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the link-handling functions used by status and report pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...

CVE-2011-10040

Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting (XSS) via the link-handling functions used by status and report pages. The issue stems from insufficient validation or escaping of user-supplied input, which may allow an attacker to inject and execute arbitrary script in...

GHSA-29XP-372Q-XQPH

creationtimestamp| type| source ---|---|--- 2025-10-30 18:04:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464435491893188...

GHSA-XGP7-7QJQ-VG47

creationtimestamp| type| source ---|---|--- 2025-10-30 16:54:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115464161009772231...

CVE-2023-53007

creationtimestamp| type| source ---|---|--- 2025-10-30 16:53:13+00:00| seen| Telegram/zur7V7RWypfFs53TicNLeM-B-PE8sFz8kVTSZxvnsh9w...

CVE-2025-11632

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2011R1.9, which stems from insufficient...

CVE-2025-9870

creationtimestamp| type| source ---|---|--- 2025-10-29 23:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4emnqcu3r2q...

CVE-2025-62402

creationtimestamp| type| source ---|---|--- 2025-10-29 19:33:03+00:00| seen| https://seclists.org/oss-sec/2025/q4/100 2025-10-29 21:09:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4eeape4oa2s 2025-10-30 12:00:40+00:00| seen|...

GHSA-9F58-4465-23C7

creationtimestamp| type| source ---|---|--- 2025-10-29 17:53:53+00:00| seen| Telegram/FcyFOIGp1355bB4pPTj-mLCS9eCskWr8JijI5t03PxSg30o...

CVE-2025-11632

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

CVE-2025-11632

The WordPress plugin Call Now Button (Call Now Button – The #1 Click to Call Button for WordPress) is affected by CVE-2025-11632 due to missing capability checks in multiple functions across versions up to 1.5.4. The issue enables authenticated users with Subscriber-level access and above to gene...

CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

CVE-2025-64229

creationtimestamp| type| source ---|---|--- 2025-10-29 09:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4d5k7qns62s...

CVE-2025-57931

creationtimestamp| type| source ---|---|--- 2025-10-29 06:05:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4crqm2euh27...

CVE-2025-62776

creationtimestamp| type| source ---|---|--- 2025-10-29 05:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4cr6p4oc624...

kernel: Linux kernel ALSA hda/ca0132 buffer overflow

This CVE has been marked as Rejected by the assigning CNA...

SUSE CVE-2025-40071

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: Don't block input queue by waiting MSC Currently gsmqueue processes incoming frames and when opening a DLC channel it calls gsmdlciopen which calls gsmmodemupdate. If basic mode is used it calls gsmmodemupdviamsc and i...