PT-2025-42973

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 Description An easily exploitable issue exists in the Oracle...

PT-2025-42933

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 Description An easily exploitable issue exists in the Oracle...

[SECURITY] Fedora 42 Update: mbedtls-3.6.5-1.fc42

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Suite Applications Services component of the Mitel MiCollab collaboration platform lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

EUVD-2025-34896

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-8414 Zigbee Green Power Host Buffer Overflow Vulnerability

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2025-8414

CVE-2025-8414 affects Zigbee EZSP Host Applications and is caused by improper input validation leading to a buffer overflow. This can cause stack corruption and, under certain conditions, arbitrary code execution. Exploitation requires access to a network key. The CVSS 4.0 score is CRITICAL (AV: ...

CVE-2025-58426

desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications...

The vulnerability of Microsoft Visio graphical editors in Microsoft Office and Microsoft 365 Apps for Enterprise packages allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Visio graphical editors in Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2025-42623

Name of the Vulnerable Software and Affected Versions Zigbee EZSP Host Applications affected versions not specified Description A buffer overflow issue exists in Zigbee EZSP Host Applications due to improper input validation. This can lead to stack corruption, potentially resulting in arbitrary...

CVE-2025-8414: Improper Input Validation

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the buffer overflows, stack corruption is possible. In certain conditions, this could lead to arbitrary code execution. Access to a network key is required to exploit this vulnerabili...

CVE-2024-42192

HCL Traveler for Microsoft Outlook HTMO is susceptible to a credential leakage which could allow an attacker to access other computers or applications...

CVE-2025-58426

desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications...

PT-2025-42458

Name of the Vulnerable Software and Affected Versions desknet's NEO versions 4.0R1.0 through 9.0R2.0 Description desknet's NEO contains a hard-coded cryptographic key. This allows an attacker to create malicious AppSuite applications. Recommendations Update to a version later than 9.0R2.0...

PT-2025-42457

Name of the Vulnerable Software and Affected Versions desknet NEO AppSuite versions 4.0R1.0 through 9.0R2.0 Description An issue exists in the AppSuite component of desknet's NEO that relates to improper protection of alternate paths. This allows an attacker to create malicious AppSuite...

GHSA-HWMC-4C8J-XXJ7 `sveltekit-superforms` has Prototype Pollution in `parseFormData` function of `formData.js`

Summary sveltekit-superforms v2.27.3 and prior are susceptible to a prototype pollution vulnerability within the parseFormData function of formData.js. An attacker can inject string and array properties into Object.prototype, leading to denial of service, type confusion, and potential remote code...

[SECURITY] Fedora 42 Update: rust-prometheus-0.14.0-1.fc42

Prometheus instrumentation library for Rust applications...

The vulnerability of the software interface of the XWiki Platform, a platform for creating collaborative web applications. The XWiki Platform has a flaw related to insufficient verification of the authenticity of executed requests, which allows attackers to carry out CSRF attacks.

The vulnerability of the software interface of the XWiki Platform for creating collaborative web applications is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow a malicious actor to carry out a CSRF attack remotely...

UBUNTU-CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

Microsoft Windows PrintWorkflowUserSvc 资源管理错误漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A resource management error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc, which stems from an attacker's ability to elevate privilege...