1166 matches found
Mattermost Desktop < 6.0.0 (macOS) (MMSA-2025-00504)
The version of Mattermost Desktop installed on the remote host is prior to 6.0.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2025-00504 advisory: - Mattermost Desktop App versions 6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged fo...
firefox: thunderbird: Same-origin policy bypass in the Request Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Request Handling component...
firefox: thunderbird: Privilege escalation in the DOM: Notifications component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Notifications component...
WordPress WP Customer Area plugin < 8.2.5 - Bulk Delete via CSRF vulnerability
Bulk Delete via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP Customer Area versions 8.2.5...
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10. A patched version of the package is available...
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27. A patched version of the package is available...
CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3
CVE-2025-66418 affecting package python-urllib3 for versions less than 2.0.7-3. A patched version of the package is available...
EUVD-2025-204101
Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through = 1.3.5...
CVE-2025-64203
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EverPress Mailster mailster allows Reflected XSS.This issue affects Mailster: from n/a through 4.1.14...
CVE-2025-54748
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through 8.6.12...
CVE-2025-64373 WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in shinetheme Traveler traveler allows PHP Local File Inclusion.This issue affects Traveler: from n/a through 3.2.6...
CVE-2025-68460
Roundcube Webmail is vulnerable to information disclosure in the HTML style sanitizer for releases before 1.5.12 and 1.6.x before 1.6.12. Multiple advisories (Debian DSA-6087, DLA-4415-1; Fedora packages roundcubemail 1.6.12; EUVD-2025-204036; NVD entry CVE-2025-68460) confirm the issue and point...
Mozilla Thunderbird < 1.0.8
The version of Thunderbird installed on the remote Windows host is prior to 1.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory. - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 CVE-2006-0749 Note that Nessus has not tested for this issu...
Mozilla Thunderbird < 1.5
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 1.5. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory. - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 CVE-2006-0749 Note that Nessus has not tested for...
Mozilla Firefox < 19.0
The version of Firefox installed on the remote Windows host is prior to 19.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-22 advisory. - out-of-bounds-read in mozilla::image::RasterImage::DrawFrameToCVE-2013-0772 CVE-2013-0772 Note that Nessus has not tested for th...
Mozilla Thunderbird ESR < 17.0.6
The version of Thunderbird ESR installed on the remote Windows host is prior to 17.0.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2013-42 advisory. - Call content level constructor as if from a chrome/privileged pageCVE-2013-1670 CVE-2013-1670 Note that Nessus has not...
Mozilla Thunderbird < 3.1.3
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 3.1.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-63 advisory. - Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and...
Mozilla Firefox < 1.0.8
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.0.8. It is, therefore, affected by a vulnerability as referenced in the mfsa2006-18 advisory. - https://bugzilla.mozilla.org/showbug.cgi?id=269095CVE-2006-0749 CVE-2006-0749 Note that Nessus has not tested for thi...