3620 matches found
CVE-2025-31062 WordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects Wishlist: from n/a through = 2.1.0...
CVE-2025-47563
CVE-2025-47563 (WordPress CURCY plugin) : The CURCY plugin (Villatheme) versions ≤ 2.3.7 suffer a Missing Authorization vulnerability that enables accessing functionality not properly constrained by ACLs, enabling Arbitrary Shortcode Execution. The CVE entry explicitly labels this as an authoriza...
WordPress WHMpress plugin <= 6.2-revision-9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin WHMpress versions = 6.2-revision-9...
CVE-2025-3624
CVE-2025-3624 describes a "Missing Authorization" vulnerability in the Hitachi Ops Center Analyzer detail view component. The issue affects Hitachi Ops Center Analyzer versions from 10.0.0-00 up to, but not including, 11.0.4-00. The cited sources consistently indicate a lack of authorization chec...
RHEL 9 : compat-openssl11 (RHSA-2025:7733)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7733 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the...
CVE-2025-2247
The CVE-2025-2247 entry concerns the WP-PManager WordPress plugin (versions 1.2 and earlier) with a CSRF vulnerability in the settings update functionality. The root cause is a lack of CSRF checks, which could allow an authenticated attacker to cause a logged-in administrator to change settings v...
RHEL 9 : git (RHSA-2025:7641)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7641 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...
ALSA-2025:7540 Moderate: libjpeg-turbo security update
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fixes: libjpeg-turbo:...
Branch Predictor Race Conditions (CVE-2024-45332)
Brocade is aware of Branch Privilege Injection: Exploiting Branch Predictor Race Conditions vulnerability CVE-2024-45332. Detail Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some...
Fedora 41 : chromium (2025-140200b18d)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-140200b18d advisory. Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2025-26685 Microsoft Defender for Identity Spoofing Vulnerability
...
CVE-2025-30384
CVE-2025-30384 describes a vulnerability in Microsoft Office SharePoint Server where deserialization of untrusted data can allow an unauthorized attacker to execute code locally. The affected products appear to be SharePoint Server variants (Enterprise/Standard) and SharePoint Server 2019/Subscri...
Moderate: Red Hat Security Advisory: python3.11 security update
An update for python3.11 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2025-4473
creationtimestamp| type| source ---|---|--- 2025-05-13 07:30:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16085 2025-05-13 08:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp23xr4pv42w 2025-05-13 11:21:37+00:00| seen| https://t.me/cvedetector/25171...
Fedora 40 : libxmp (2025-34421311f4)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-34421311f4 advisory. Fixes CVE-2025-47256 . Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
SUSE SLED15: augeas / augeas-bash-completion / augeas-devel / augeas-devel-32bit / etc (SUSE-SU-2025:1534-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1534-1 advisory. - CVE-2025-2588: Check for NULL pointers when calling recaseexpand in function faexpandnocase. bsc1239909...
libxmp-devel-4.6.3-1.1 on GA media (moderate)
libxmp-devel-4.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15081-1 Rating: moderate Cross-References: CVE-2025-47256 CVSS scores: CVE-2025-47256 SUSE : 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2025-1522)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ALSA-2025:7517 Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...