GHSA-R936-GWX5-V52F Spring Framework MVC Applications Path Traversal Vulnerability

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

PT-2025-33673 · Aiven · Aiven-Db-Migrate

Name of the Vulnerable Software and Affected Versions: aiven-db-migrate versions prior to 1.0.7 Description: aiven-db-migrate is a database migration tool. A privilege escalation issue exists that could allow elevation to superuser inside PostgreSQL databases during a migration from an untrusted...

Qualcomm Execution Outside Buffer DoS

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause system failures...

Qualcomm Memory Rerelease Code Execution

The vulnerability of embedded Qualcomm software lies in a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Qualcomm Memory Use After Release

The vulnerability of embedded Qualcomm software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Computer Vision Data Compromise

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

Core Services Embedded Qualcomm Data Compromise

The vulnerability of Core Services components in embedded Qualcomm software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Heap Buffer Overflow

The vulnerability of embedded Qualcomm software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Qualcomm Execution Outside Buffer Disclosure

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

Malicious code in flask-tdg-cyberx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...

CVE-2025-55710

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-54685

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force SureDash suredash allows Retrieve Embedded Sensitive Data.This issue affects SureDash: from n/a through = 1.1.0...

Qualcomm Embedded Software Uncontrolled Certification DoS

The vulnerability of embedded Qualcomm software is related to an uncontrolled and exploitable specification. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-55710

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-54736

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy savoy allows Retrieve Embedded Sensitive Data.This issue affects Savoy: from n/a through = 3.0.8...

MAL-2025-31016 Malicious code in qlik-cloud-embedded-analytics-workshop (npm)

The package qlik-cloud-embedded-analytics-workshop was found to contain malicious code...

MAL-2025-19553 Malicious code in embedded-finance (npm)

The package embedded-finance was found to contain malicious code...

Malicious code in embedded-finance (npm)

The package embedded-finance was found to contain malicious code...

Malicious code in qlik-cloud-embedded-analytics-workshop (npm)

The package qlik-cloud-embedded-analytics-workshop was found to contain malicious code...