115080 matches found
WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin Gutenverse Form versions = 2.2.0...
Debian: Security Advisory (DLA-4385-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Synology DiskStation Manager (DSM) RCE Vulnerability (Synology-SA-24:20) - Remote Known Vulnerable Versions Check
Synology DiskStation Manager DSM is prone to a remote code execution RCE vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
libexpat security vulnerabilities
libexpat is a streaming XML parser written in C by the libexpat team. A security vulnerability exists in libexpat 2.7.3 and earlier versions, which stems from specially crafted files that may result in excessive processing times...
EUVD-2025-199832
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting XSS vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if t...
CVE-2025-12421 Account Takeover via Code Exchange Endpoint
Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email...
CVE-2025-13536 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...
CVE-2025-12666 Google Drive upload and download link <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Google Drive upload and download link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter of the 'atachfilegoogle' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for...
VulnCheck KEV: CVE-2025-52472
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...
D-Link DIR-822K Embedded Web Server Code Execution
The vulnerability of the sub4151FC and sub41491C functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...
Mattermost security vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from insufficient validation of code exchange tokens, which could lead to account takeover. The following versions are affected: version 11.0.2...
WordPress plugin Poll Survey Quiz Maker Plugin by Opinion Stage has a cross-site request forgeing vulnerability.
WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress...
DEBIAN-CVE-2025-64335
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64data. This issue has been patched in...
UBUNTU-CVE-2025-64344
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected wh...
-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66031 via node-forge (>=1.0.0, <=1.3.1)
node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66031 Source advisory: SNYK:JS-NODEFORGE-14125745...
-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)
node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: SNYK:JS-NODEFORGE-14125097...
-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66031 via node-forge (>=1.0.0, <=1.3.1)
node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66031 Source advisory: OSV:GHSA-554W-WPV2-VW27...
-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)
node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: OSV:GHSA-65CH-62R8-G69G...
-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-12816 via node-forge (>=1.0.0, <=1.3.1)
node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-12816 Source advisory: OSV:GHSA-5GFM-WPXJ-WJGQ...