Archive
18 October 2025
Vulnerabilities first published on this day (UTC), newest first.
73 results · Feed
-
High 8.8
Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system
Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who has tricked a user into giving up their Geode session credentials to submit malicious commands on the target system on b…
-
Unscored —
`unic-ucd-segment` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-core` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-age` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-common` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-ident` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties) - [`unicode-ident`](https://crates.io/crates/unicode-ident)
-
Unscored —
`unic-ucd-block` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-version` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-idna-mapping` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-bidi` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`unicode-bidi`](https://crates.io/crates/unicode-bidi)
-
Unscored —
`unic` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu`](https://crates.io/crates/icu) - [`idna`](https://crates.io/crates/idna) - [`unicode-bidi`](https://crates.io/crates/unicode-bidi)
-
Unscored —
`unic-ucd-category` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-char-basics` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-case` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-utils` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-emoji-char` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-name_aliases` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-idna-punycode` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-cli` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-char` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-idna` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-emoji` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-bidi` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer) - [`unicode-normalization`](https://crates.io/crates/unicode-normalization)
-
Unscored —
`unic-char-property` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-common` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-hangul` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer) - [`unicode-normalization`](https://crates.io/crates/unicode-normalization)
-
Unscored —
`unic-ucd-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer)
-
Unscored —
`unic-ucd` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-name` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-char-range` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - Since version [1.45.0](https://releases.rs/docs/1.45.0/#libraries) Rust [supports](https://github.com/rust-lang/rust/pull/72413/) using …
-
Unscored —
`unic-segment` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_segmenter`](https://crates.io/crates/icu_segmenter) - [`unicode-segmentation`](https://crates.io/crates/unicode-segmentation)
-
Medium 4.4CVE-2025-11926 Public exploit
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke…
-
High 8.8
Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution
The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0. This is due to missing or incorrect nonce validation on the 'theme_editor_theme' page. This makes it possible for unauthenticated atta…
-
Unscored —
net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls cancel_delayed_work() in ocelot_stats_deinit() to cancel the cyclic delayed work item ocelot->stats_w…
-
Unscored —
thunderbolt: Fix use-after-free in tb_dp_dprx_work
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix use-after-free in tb_dp_dprx_work The original code relies on cancel_delayed_work() in tb_dp_dprx_stop(), which does not ensure that the delayed work item tunnel->dprx_work h…
-
Unscored —
scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
In the Linux kernel, the following vulnerability has been resolved: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue During the detaching of Marvell's SAS/SATA controller, the original code calls cancel_delayed_work() in mvs_free() to cancel the delayed…
-
High 7.8
Nixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow
A vulnerability has been found in Nixdorf Wincor PORT IO Driver up to 1.0.0.1. This affects the function sub_11100 in the library wnport.sys of the component IOCTL Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to ap…
-
Medium 5.3
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0. This is due to missing capability checks and authentication verification on the 'testUser' endpoint accessible via th…
-
Medium 5.3
Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload li…