40628 matches found
WordPress DirectoryPress Frontend plugin <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update vulnerability
Cross-Site Request Forgery to Listing Status Update vulnerability discovered by incognito in WordPress Plugin DirectoryPress Frontend versions = 2.7.9...
Metasploit Weekly Wrap-Up 02/14/2025
New module content 2 Unauthenticated RCE in NetAlertX Authors: Chebuya Rhino Security Labs and Takahiro Yokoyama Type: Exploit Pull request: 19868 contributed by Takahiro-Yoko Path: linux/http/netalertxrcecve202446506 AttackerKB reference: CVE-2024-46506 Description: A new module for an...
CVE-2025-25297
creationtimestamp| type| source ---|---|--- 2025-02-14 19:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114003891483235545 2025-02-14 20:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5zfzryra2a 2025-02-14 20:49:10+00:00| seen|...
CGA-MXW5-M488-459H
Bulletin has no description...
CVE-2025-25290
creationtimestamp| type| source ---|---|--- 2025-02-14 17:28:40+00:00| published-proof-of-concept| https://github.com/octokit/request.js/security/advisories/GHSA-rmvr-2pp2-xj38 2025-02-14 19:40:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114003936429038682 2025-02-14 20:15:57+00:0...
CVE-2025-26156
creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...
CVE-2025-26507
creationtimestamp| type| source ---|---|--- 2025-02-14 17:07:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114003336646314046 2025-02-14 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pet2qqw2s 2025-02-14 18:45:09+00:00| seen|...
CVE-2025-25745
creationtimestamp| type| source ---|---|--- 2025-02-14 16:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyyhvgd2e 2025-02-14 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114003261336817886 2025-02-14 19:35:00+00:00| seen|...
CVE-2025-23771
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzg3cez24 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750878299039...
CVE-2025-23742
creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byzs54c2s 2025-02-14 14:23:47+00:00| seen| https://infosec.exchange/users/cve/statuses/114002691811095242...
SUSE-EL-9-CLIENT-TOOLS-2025-532 Security update for SUSE Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.75 jscECO-3319: - Added Ism profile for OL8, OL9 - Added new product kylinserver10 - Created OL10 product - Release SLMicro5 product - Replaced two date injections by SOURCEDATEEPOCH to make reproducible...
SUSE-SU-2025:0525-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: - Added MAC based terminal naming option jscSUMA-314 golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated...
CVE-2024-22074
Dynamsoft Service 1.8.1025 through 1.8.2013, 1.7.0330 through 1.7.2531, 1.6.0428 through 1.6.1112, 1.5.0625 through 1.5.3116, 1.4.0618 through 1.4.1230, and 1.0.516 through 1.3.0115 has Incorrect Access Control. This is fixed in 1.8.2014, 1.7.4212, 1.6.3212, 1.5.31212, 1.4.3212, and 1.3.3212...
SAP NetWeaver AS Java Multiple Vulnerabilities (Feb 2025)
SAP NetWeaver Application Server for Java is affected by multiple vulnerabilities, including the following: - The User Admin application of SAP NetWeaver AS for Java insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This resul...
Security Updates for Outlook C2R (February 2025)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
Security Updates for Microsoft Access Products C2R (February 2025)
The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21186, CVE-2025-21395, CVE-2025-21366 Note that Nessus has not tested for these issues but ha...
Oracle Linux 9 : nodejs:18 (ELSA-2025-1446)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1446 advisory. - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 Tenable has extracted the preceding description block directly from the Oracle...
SUSE: Security Advisory (SUSE-SU-2025:0517-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : nodejs:20 (ELSA-2025-1351)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1351 advisory. - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76001 RHEL-76146 - Update to 20.16.0 Fixes: CVE-2024-361...
