1994 matches found
WordPress Ultimate Dashboard plugin < 3.8.6 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Ultimate Dashboard versions 3.8.6...
CVE-2025-13912 affecting package mariadb for versions less than 10.11.15-1
CVE-2025-13912 affecting package mariadb for versions less than 10.11.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-52970 affecting package mariadb for versions less than 10.11.15-1
CVE-2023-52970 affecting package mariadb for versions less than 10.11.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44
CVE-2025-2296 affecting package edk2 for versions less than 20230301gitf80f052277c8-44. A patched version of the package is available...
CVE-2025-68156 affecting package coredns for versions less than 1.11.4-12
CVE-2025-68156 affecting package coredns for versions less than 1.11.4-12. A patched version of the package is available...
WordPress Ocean Modal Window plugin < 2.3.3 - Editor+ Remote Code Execution vulnerability
Editor+ Remote Code Execution vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin Ocean Modal Window versions 2.3.3...
AZL-73186 CVE-2025-13699 affecting package mariadb for versions less than 10.11.15-1
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors m...
CVE-2025-65082 affecting package httpd for versions less than 2.4.66-1
CVE-2025-65082 affecting package httpd for versions less than 2.4.66-1. An upgraded version of the package is available that resolves this issue...
📄 HPE OneView Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability against Hewlett Packard Enterprise HPE OneView. All versions below 11.00 are vulnerable so long as the vendor supplied hotfix has not been applied, however some VM product versions do not enable the vulnerable...
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13
CVE-2025-65637 affecting package moby-compose for versions less than 2.17.3-13. A patched version of the package is available...
CVE-2025-65637 affecting package kubevirt for versions less than 0.59.0-32
CVE-2025-65637 affecting package kubevirt for versions less than 0.59.0-32. A patched version of the package is available...
CVE-2025-65637 affecting package influxdb for versions less than 2.7.5-9
CVE-2025-65637 affecting package influxdb for versions less than 2.7.5-9. A patched version of the package is available...
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20
CVE-2025-65637 affecting package dcos-cli for versions less than 1.2.0-20. A patched version of the package is available...
CVE-2025-64324 affecting package kubevirt for versions less than 1.5.3-3
CVE-2025-64324 affecting package kubevirt for versions less than 1.5.3-3. A patched version of the package is available...
CVE-2025-13321
Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs...
CVE-2025-9787
CVE-2025-9787 affects Zohocorp ManageEngine Applications Manager (versions 177400 and earlier). It is a Stored Cross-Site Scripting vulnerability in the NOC view. IMPLICATIONS: CVSS 3.1 base score 6.1 (MEDIUM): NETWORK attack vector, HIGH confidentiality and integrity impact, requires user intera...
CVE-2025-13326 Mattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store
Mattermost Desktop App versions 6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder...
CVE-2025-13326
CVE-2025-13326 affects Mattermost Desktop App on macOS versions prior to 6.0.0, failing to enable the Hardened Runtime in Mac App Store builds. This allows an attacker to inherit TCC permissions by copying the binary to a temporary folder. Affected component is the Mattermost Desktop App binary; ...
AZL-72634 CVE-2025-68303 affecting package kernel for versions less than 6.6.119.3-1
In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punitipc: fix memory corruption This passes the address of the pointer "&punitipcdev" when the intent was to pass the pointer itself "punitipcdev" without the ampersand. This means that the:...