CVE Alert: CVE-2024-13628
Vulnerability Summary: CVE-2024-13628 The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting...
Vulnerability Summary: CVE-2024-13628 The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting...
Vulnerability Summary: CVE-2025-1517 The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets &...
Vulnerability Summary: CVE-2024-47053 This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized...
Vulnerability Summary: CVE-2024-6810 The Quiz Organizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,...
Vulnerability Summary: CVE-2025-0731 An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the...
Vulnerability Summary: CVE-2025-26698 Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files...
Vulnerability Summary: CVE-2025-0719 IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability...
Vulnerability Summary: CVE-2024-52925 In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the...
Vulnerability Summary: CVE-2025-26925 Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects...
Vulnerability Summary: CVE-2025-1249 Missing Authorization vulnerability in Pixelite Events Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...
Vulnerability Summary: CVE-2025-25800 SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php....
Vulnerability Summary: CVE-2025-0941 MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text...
Vulnerability Summary: CVE-2024-46226 A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary...
Vulnerability Summary: CVE-2025-20118 A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated,...
Vulnerability Summary: CVE-2025-20119 A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker...
Vulnerability Summary: CVE-2025-20117 A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary...
Vulnerability Summary: CVE-2025-20161 A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000...
Vulnerability Summary: CVE-2025-1726 There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and...
Vulnerability Summary: CVE-2025-20111 A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000...
Vulnerability Summary: CVE-2025-1634 A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low...
Vulnerability Summary: CVE-2025-20116 A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform...
Vulnerability Summary: CVE-2025-26598 An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer...
Vulnerability Summary: CVE-2025-26597 A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0...
Vulnerability Summary: CVE-2025-21626 GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to...