CVE-2025-4904 D-Link DI-7003GV2 webgl.data sub_41F0FC information disclosure

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. This vulnerability affects the function sub41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed...

WordPress Advance Post Prefix plugin <= 1.1.1 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin Advance Post Prefix versions = 1.1.1...

K000151411: Apache Tomcat vulnerability CVE-2025-31651

Security Advisory Description CVE-2025-31650 Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger a...

WordPress Connexion Logs plugin <= 3.0.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Régis SENET in WordPress Plugin Connexion Logs versions = 3.0.2...

CVE-2025-4805

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS allows Stored XSS. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through...

CVE-2025-4752

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /installbase.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has bee...

python311-oauthlib-3.2.2-5.4 on GA media (moderate)

python311-oauthlib-3.2.2-5.4 on GA media Announcement ID: openSUSE-SU-2025:15100-1 Rating: moderate Cross-References: CVE-2022-36087 CVSS scores: CVE-2022-36087 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

CVE-2025-31630

Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31062 WordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-47563

CVE-2025-47563 (WordPress CURCY plugin) : The CURCY plugin (Villatheme) versions ≤ 2.3.7 suffer a Missing Authorization vulnerability that enables accessing functionality not properly constrained by ACLs, enabling Arbitrary Shortcode Execution. The CVE entry explicitly labels this as an authoriza...

WordPress WHMpress plugin <= 6.2-revision-9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin WHMpress versions = 6.2-revision-9...

CVE-2025-3624

CVE-2025-3624 describes a "Missing Authorization" vulnerability in the Hitachi Ops Center Analyzer detail view component. The issue affects Hitachi Ops Center Analyzer versions from 10.0.0-00 up to, but not including, 11.0.4-00. The cited sources consistently indicate a lack of authorization chec...

RHEL 9 : compat-openssl11 (RHSA-2025:7733)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7733 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the...

CVE-2025-2247

The CVE-2025-2247 entry concerns the WP-PManager WordPress plugin (versions 1.2 and earlier) with a CSRF vulnerability in the settings update functionality. The root cause is a lack of CSRF checks, which could allow an authenticated attacker to cause a logged-in administrator to change settings v...

RHEL 9 : git (RHSA-2025:7641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7641 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

ALSA-2025:7540 Moderate: libjpeg-turbo security update

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...

Fedora 41 : chromium (2025-140200b18d)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-140200b18d advisory. Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the Fedora security...

Branch Predictor Race Conditions (CVE-2024-45332)

Brocade is aware of Branch Privilege Injection: Exploiting Branch Predictor Race Conditions vulnerability CVE-2024-45332. Detail Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some...

CVE-2025-26685 Microsoft Defender for Identity Spoofing Vulnerability

...

CVE-2025-30384

CVE-2025-30384 describes a vulnerability in Microsoft Office SharePoint Server where deserialization of untrusted data can allow an unauthorized attacker to execute code locally. The affected products appear to be SharePoint Server variants (Enterprise/Standard) and SharePoint Server 2019/Subscri...