Linux Distros Unpatched Vulnerability : CVE-2024-28188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of jupyter-scheduler users...

WordPress Anesta Theme <= 1.2.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Anesta versions = 1.2.1...

CVE-2025-58854

Cross-Site Request Forgery CSRF vulnerability in Samer Bechara Ultimate AJAX Login ultimate-ajax-login allows Reflected XSS.This issue affects Ultimate AJAX Login: from n/a through = 1.2.1...

CVE-2025-48103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-48103 WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-48103

CVE-2025-48103 is a stored XSS in the WordPress plugin Today's Date Inserter (versions

CVE-2025-58854 WordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Samer Bechara Ultimate AJAX Login ultimate-ajax-login allows Reflected XSS.This issue affects Ultimate AJAX Login: from n/a through = 1.2.1...

CVE-2025-58854 WordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Samer Bechara Ultimate AJAX Login ultimate-ajax-login allows Reflected XSS.This issue affects Ultimate AJAX Login: from n/a through = 1.2.1...

WordPress 코드엠샵 소셜톡 plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin 코드엠샵 소셜톡 versions = 1.2.2...

WordPress plugin Ultimate AJAX Login 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-36167

Name of the Vulnerable Software and Affected Versions: codemstory 코드엠샵 소셜톡 versions through 1.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations: At the moment, ther...

PT-2025-36243

Name of the Vulnerable Software and Affected Versions: mulscully Today's Date Inserter versions through 1.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Today's...

Malicious code in s4-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4b0ff124956b3356a75ab19d9e7f2bddfa64f0afa017c20f34899c963fbb6be0 The OpenSSF Package Analysis project identified 's4-client' @ 1.2.1.r10ab0de rubygems as malicious. It is considered malicious because: - The...

CVE-2025-48357

Cross-Site Request Forgery CSRF vulnerability in Theme Century Century ToolKit century-toolkit allows Cross Site Request Forgery.This issue affects Century ToolKit: from n/a through = 1.2.1...

CVE-2025-48357

CVE-2025-48357 is a CSRF vulnerability affecting the WordPress plugin Century ToolKit up to version 1.2.1. The issue allows an attacker to trigger actions (arbitrary plugin activation) on behalf of an authenticated user, requiring user interaction. Exploitation details are supported by multiple s...

WordPress plugin Century ToolKit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Linux Distros Unpatched Vulnerability : CVE-2018-14912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgitcloneobjects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a...

Linux Distros Unpatched Vulnerability : CVE-2018-16742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter. CVE-2018-16742...

Linux Distros Unpatched Vulnerability : CVE-2020-11082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed i...

Important: Red Hat Security Advisory: RHTAS 1.2.1 - Red Hat Trusted Artifact Signer Release

The 1.2.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.2 The RHTAS Operator can be used with OpenShift Container Platform 4.15, 4.16, 4.17, 4.18...