Palo Alto Networks Security Advisories /CVE-2024-5916CVE-2024-5916 PAN-OS: Cleartext Exposure of External System SecretsUrgencyMODERATE047910Severity6 ·MEDIUMExploit MaturityN/AResponse EffortHIGHRecoveryUSERValue DensityCONCENTRATEDAttack VectorNETWORKAttack ComplexityLOWAttack RequirementsNONEAutomatableNOUser...
Palo Alto Networks Security Advisories /CVE-2024-5916CVE-2024-5916 PAN-OS: Cleartext Exposure of External System SecretsUrgencyMODERATE047910Severity6 ·MEDIUMExploit MaturityN/AResponse EffortHIGHRecoveryUSERValue DensityCONCENTRATEDAttack VectorNETWORKAttack ComplexityLOWAttack RequirementsNONEAutomatableNOUser...
Palo Alto Networks Security Advisories /CVE-2024-9468CVE-2024-9468 PAN-OS: Firewall Denial of Service (DoS) via a Maliciously Crafted PacketUrgencyMODERATE047910Severity8.2 ·HIGHExploit MaturityN/AResponse EffortLOWRecoveryUSERValue...
Palo Alto Networks Security Advisories /CVE-2024-5916CVE-2024-5916 PAN-OS: Cleartext Exposure of External System SecretsUrgencyMODERATE047910Severity6 ·MEDIUMExploit MaturityN/AResponse EffortHIGHRecoveryUSERValue DensityCONCENTRATEDAttack VectorNETWORKAttack ComplexityLOWAttack RequirementsNONEAutomatableNOUser...
Palo Alto Networks Security Advisories /CVE-2024-5916CVE-2024-5916 PAN-OS: Cleartext Exposure of External System SecretsUrgencyMODERATE047910Severity6 ·MEDIUMExploit MaturityN/AResponse EffortHIGHRecoveryUSERValue DensityCONCENTRATEDAttack VectorNETWORKAttack ComplexityLOWAttack RequirementsNONEAutomatableNOUser...
Vulnerability Summary: CVE-2025-3867 The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions...
Vulnerability Summary: CVE-2025-3866 The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request...
Vulnerability Summary: CVE-2025-3868 The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter...
Vulnerability Summary: CVE-2025-46616 Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of...
Vulnerability Summary: CVE-2025-46617 Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of...
Vulnerability Summary: CVE-2025-3870 The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up...
Vulnerability Summary: CVE-2025-1279 The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead...
Vulnerability Summary: CVE-2025-46535 Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This...
Vulnerability Summary: CVE-2025-1565 The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to,...
Vulnerability Summary: CVE-2025-46482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz allows Stored...
Vulnerability Summary: CVE-2025-2986 IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user...
Vulnerability Summary: CVE-2024-11917 The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up...
Vulnerability Summary: CVE-2024-57375 Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker...
Vulnerability Summary: CVE-2025-3912 The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is...
Vulnerability Summary: CVE-2025-2470 The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board...
Vulnerability Summary: CVE-2025-3627 A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other...
Vulnerability Summary: CVE-2025-3634 A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing...
Vulnerability Summary: CVE-2025-32432 Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting...
Vulnerability Summary: CVE-2025-28354 An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers...
