415 matches found
Siemens SIMATIC Devices Out-of-bounds Read (CVE-2025-21647)
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21826)
netfilter: nftables: reject mismatching sum of fieldlen with set key length. The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapoinit. The set key length provides the...
EUVD-2018-8771
Malware in sbrugna...
EUVD-2015-8711
Malware in sbrugna...
EUVD-2012-2906
Malware in sbrugna...
EUVD-2024-41134
Malicious code in bioql PyPI...
EUVD-2025-18940
Malicious code in bioql PyPI...
MAL-2025-13808 Malicious code in @zalastax/nolb-react-tm (npm)
The package @zalastax/nolb-react-tm was found to contain malicious code...
Malicious code in @zalastax/nolb-cra-tm (npm)
The package @zalastax/nolb-cra-tm was found to contain malicious code...
Malicious code in @zalastax/nolb-react-tm (npm)
The package @zalastax/nolb-react-tm was found to contain malicious code...
MAL-2025-11021 Malicious code in @zalastax/nolb-cra-tm (npm)
The package @zalastax/nolb-cra-tm was found to contain malicious code...
PT-2025-26673 · Tarantool +1 · Tarantool +1
Name of the Vulnerable Software and Affected Versions: Tarantool versions up to 3.3.1 Description: A vulnerability has been found in the tm to datetime function in the library src/lib/core/datetime.c. The manipulation leads to a reachable assertion. Attacking locally is a requirement...
CVE-2025-49972
Cross-Site Request Forgery CSRF vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Request Forgery.This issue affects TM Replace Howdy: from n/a through = 1.4.2...
CVE-2025-49972
Cross-Site Request Forgery CSRF vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Request Forgery.This issue affects TM Replace Howdy: from n/a through = 1.4.2...
CVE-2025-49972
CVE-2025-49972 concerns the WordPress plugin TM Replace Howdy (versions
CVE-2025-49972 WordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Request Forgery.This issue affects TM Replace Howdy: from n/a through = 1.4.2...
CVE-2025-49972 WordPress TM Replace Howdy plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in David Wood TM Replace Howdy tm-replace-howdy allows Cross Site Request Forgery.This issue affects TM Replace Howdy: from n/a through = 1.4.2...
PT-2025-26340 · Unknown · Tm Replace Howdy
Name of the Vulnerable Software and Affected Versions: TM Replace Howdy versions 1.4.2 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects the TM Replace Howdy plugin, enabling Cross Site Request...
WordPress plugin TM Replace Howdy 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...