CVE-2025-5889 affecting package nodejs18 for versions less than 18.20.3-9

CVE-2025-5889 affecting package nodejs18 for versions less than 18.20.3-9. A patched version of the package is available...

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8. A patched version of the package is available...

CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14. A patched version of the package is available...

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

CVE-2024-50612 affecting package libsndfile for versions less than 1.0.31-4

CVE-2024-50612 affecting package libsndfile for versions less than 1.0.31-4. A patched version of the package is available...

CVE-2025-47906 affecting package golang for versions less than 1.22.7-5

CVE-2025-47906 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

CVE-2025-4674 affecting package golang for versions less than 1.22.7-5

CVE-2025-4674 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

AZL-68193 CVE-2025-11234 affecting package qemu for versions less than 8.2.0-23

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...

AZL-68202 CVE-2025-11234 affecting package qemu for versions less than 6.2.0-25

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...

CVE-2025-61589

CVE-2025-61589 affects Cursor: in versions 1.6 and earlier, Mermaid diagram rendering can embed images that are rendered in the chat box, enabling an attacker to exfiltrate sensitive information to a third‑party server via an image fetch after a prompt injection. The issue requires malicious inpu...

PT-2025-40460

Name of the Vulnerable Software and Affected Versions Emlog versions 2.5.21 and below Description Emlog is a website building system. A flaw exists where a malicious payload can be saved through the mail template settings, leading to stored cross-site scripting XSS. When an attacker saves malicio...

Zyxel < 5.38 Directory Traversal

According to its banner, the version of Zyxel running on the remote host is 5.38. It is, therefore, affected by a Directory Traversal that could allow an attacker to download or upload files via a crafted URL. Note that the scanner has not tested for these issues but has instead relied only on th...

CVE-2025-20370

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capability changeauthentication, could send multiple LDAP bind requests to a specific...

CVE-2025-59362 affecting package squid for versions less than 6.13-2

CVE-2025-59362 affecting package squid for versions less than 6.13-2. A patched version of the package is available...

Splunk Enterprise 9.2.0 < 9.2.8, 9.3.0 < 9.3.6, 9.4.0 < 9.4.4 (SVD-2025-1004)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1004 advisory. - In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108,...

Splunk Enterprise 9.2.0 < 9.2.8, 9.3.0 < 9.3.6, 9.4.0 < 9.4.4 (SVD-2025-1002)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1002 advisory. - In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.1...

CVE-2025-39823 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39823 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39808 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39808 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39736 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39736 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...