Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.5 CVE-2025-3650

jQuery Colorbox <= 4.6.3 - Contributor+ Stored XSS_CVE-2025-3650

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes on links before using them, ...

Unknown jQuery Colorbox CVE
LOW 2.3 CVE-2025-10320

iteachyou Dreamer CMS updatePwd weak password_CVE-2025-10320

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. ...

iteachyou Dreamer CMS 4.1.3.0 CVE
LOW 2.4 CVE-2025-4234

Cortex XDR Microsoft 365 Defender Pack: Cleartext Exposure of Credentials_CVE-2025-4234

A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normal...

Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack 4.6.0 CVE
LOW 2.1 CVE-2025-27238

API hostprototype.get lists data to users with insufficient authorization._CVE-2025-27238

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.

Zabbix Zabbix 7.0.0 CVE
LOW 2.3 CVE-2025-10287

roncoo roncoo-pay orderQuery direct request_CVE-2025-10287

A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element is an unknown function of ...

roncoo roncoo-pay 9428382af21cd5568319eae7429b7e1d0332ff40 CVE
LOW 1 CVE-2025-43789

CVE-2025-43789_CVE-2025-43789

JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSG...

Liferay Portal 7.4.0 CVE
LOW 2.7 CVE-2025-59047

matrix-sdk-base has panic in the `RoomMember::normalized_power_level()` method_CVE-2025-59047

matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power...

matrix-org matrix-rust-sdk < 0.14.1 CVE
LOW 2.3 CVE-2025-10252

SEAT Queue Ticket Kiosk Java RMI Registry deserialization_CVE-2025-10252

A flaw has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI Registry Handler. This mani...

SEAT Queue Ticket Kiosk 20250827 CVE
LOW 2.3 CVE-2025-10250

DJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key_CVE-2025-10250

A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500. Affected is an unknown function of the component Telemetry ...

DJI Mavic Spark 01.00.0500 CVE
LOW 2.1 CVE-2025-10216

GrandNode Voucher ConfirmOrder race condition_CVE-2025-10216

A vulnerability was detected in GrandNode up to 2.3.0. The impacted element is an unknown function of the file /checkout/ConfirmOrder/ of the compo...

n/a GrandNode 2.0 CVE