PT-2025-20380

Name of the Vulnerable Software and Affected Versions AP Page Builder versions prior to 4.0.0 Description The issue is an Absolute Path Traversal vulnerability that could allow an unauthenticated remote user to modify the product item path within the config JSON file, allowing them to read any fi...

CVE-2025-26845

CVE-2025-26845 describes an Eval Injection vulnerability in Znuny up to version 7.1.3. A user with write access to the configuration file can cause code execution via the command that runs the backup.pl script, effectively allowing escalation to the user running that script. The primary affected ...

RLSA-2024:4420 Important: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

CVE-2025-20194

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

CVE-2025-20194

Cisco IOS XE Software Web-Based Management Interface vulnerability (CVE-2025-20194) affects Cisco IOS XE: an authenticated, low-privileged, remote attacker can exploit insufficient input validation in the web UI to perform an injection attack. Consequences described include reading limited files ...

SUSE-SU-2025:1505-1 Security update for apparmor

This update for apparmor fixes the following issues: - Add dacreadsearch capability for unixchkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. bsc1241678...

CVE-2025-2905

Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity XXE resolution in multiple WSO2 Products. A successful XXE attack could allow a remote, unauthenticated attacker to: Read sensitive files from the...

CVE-2025-20978

Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege...

CVE-2025-20949

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members...

CVE-2025-20978

Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege...

CVE-2025-20978

Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege...

CVE-2025-20967

The CVE-2025-20967 case concerns Samsung Gallery. Affected versions expose improper access control in Global Android 13 (pre-14.5.10.3), China Android 13 (pre-14.5.09.3), and Android 14 (pre-15.5.04.5), allowing an attacker to read and write arbitrary files with Samsung Gallery privileges. The un...

CVE-2025-20967

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege of Samsung Gallery...

CVE-2025-20961

Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege...

CVE-2025-20949

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members...

CVE-2025-20949

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members...

CVE-2025-20949

The CVE-2025-20949 entry concerns Samsung Members with a path traversal vulnerability affecting versions prior to 5.0.00.11. Reported data describe an issue where an attacker could read and write arbitrary files using the privilege of Samsung Members, due to improper filtering of path elements. S...

PT-2025-20119 · Eventon · Eventon

Name of the Vulnerable Software and Affected Versions: EventON versions n/a through 2.4.1 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a...

PT-2025-20063 · Penup · Penup

Name of the Vulnerable Software and Affected Versions: PENUP versions prior to 3.9.19.32 Description: The issue is related to improper access control, allowing local attackers to access files with PENUP privilege. Recommendations: For versions prior to 3.9.19.32, update to version 3.9.19.32 or...

PT-2025-20266 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is due to insufficient input validation in the web-based management interface, allowing an authenticated, low-privileged, remote attacker to perform an injection...