Yonyou YonBIP - Path Traversal

Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information. id: CVE-2025-66744 info: name: Yonyou YonBIP - Path Traversal author:...

ROOT-OS-UBUNTU-2204-CVE-2025-38436 CVE-2025-38436 in rootio-linux - Patched by Root

Root has patched CVE-2025-38436 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21913 CVE-2025-21913 in rootio-linux - Patched by Root

Root has patched CVE-2025-21913 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2025-70148

creationtimestamp| type| source ---|---|--- 2026-02-18 18:32:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mf5pnyqhuz2h 2026-02-18 19:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5rahomoq2k...

Exploit for CVE-2025-4517

CVE-2025-4517-PoC VE-2025-451...

CVE-2025-54519

A DLL hijacking vulnerability (root cause: uncontrolled search paths) in Doc Nav (Documentation Navigator) related to Vivado 2024.2 installations could allow a local attacker to achieve privilege escalation and potentially arbitrary code execution. Affected component: Documentation Navigator. Exp...

CVE-2025-46301

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4. A malicious HID device may cause an unexpected process crash...

DEBIAN-CVE-2025-67482

Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, library.C. This issue affects Scribunto: from before 1.39.16, 1.43.6, 1.44.3, 1.45.1; luasandbox: from before...

CVE-2025-6927

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, includes/api/ApiQueryBlocks.Php. This issue affects MediaWiki: from = 1.42.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0...

CVE-2025-6592

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

Exploit for CVE-2025-6934

CVE-2025-6934-Opal-E...

Important: Red Hat Security Advisory: container-tools:rhel8 security update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Fedora 43 : gpsd (2026-2ca69451b9)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2ca69451b9 advisory. Security fixes for CVE-2025-67268 and CVE-2025-67269. Tenable has extracted the preceding description block directly from the Fedora security...

TencentOS Server 2: webkitgtk4 (TSSA-2025:0998)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0998 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2025-56424

An issue in Insiders Technologies GmbH e-invoice pro before release 1 Service Pack 2 allows a remote attacker to cause a denial of service via a crafted script...

CVE-2025-15102 DVP-12SE11T - Password Protection Bypass

DVP-12SE11T - Password Protection Bypass...

ROOT-OS-DEBIAN-12-CVE-2025-65955 CVE-2025-65955 in rootio-imagemagick - Patched by Root

Root has patched CVE-2025-65955 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-67288

creationtimestamp| type| source ---|---|--- 2025-12-22 19:44:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3malynpgpk32p 2025-12-22 21:47:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mam7j2ikoq2e 2025-12-23 04:04:45+00:00| seen|...

DEBIAN-CVE-2025-68323

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: fix use-after-free caused by uec-work The delayed work uec-work is scheduled in gaokunucsiprobe but never properly canceled in gaokunucsiremove. This creates use-after-free scenarios where the ucsi and gaokunucs...

BELL-CVE-2025-68227

Bulletin has no description...