11 matches found
CVE-2025-67995 WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through 2.1...
CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11
CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15
CVE-2024-45783 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15
CVE-2024-45778 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-52547
E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...
CVE-2025-51510
MoonShine was discovered to contain a SQL injection vulnerability under the Blog - Categories page when using the moonshine-tree-resource version 2.0.2 component...
WordPress Butcher theme < 2.54 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Butcher versions 2.54...
AZL-39394 CVE-2023-33953 affecting package python-tensorboard for versions less than 2.11.0-2
gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks: - Unbounded memory buffering in the HPACK parser - Unbounded CPU consumption ...
AZL-35139 CVE-2022-40896 affecting package python-pygments for versions less than 2.4.2-1
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer...
AZL-33582 CVE-2022-41717 affecting package gh for versions less than 2.13.0-2
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate...
PT-2022-25283 · WordPress · Wpforo Forum
Name of the Vulnerable Software and Affected Versions: wpForo Forum plugin versions = 2.0.5 Description: The issue is related to an insecure direct object references IDOR vulnerability. This vulnerability allows attackers with subscriber or higher user roles to mark any forum post as private or...