CVE-2025-27137

Summary: CVE-2025-27137 affects Dependency-Track where templates are evaluated with Pebble and can be manipulated via the include tag. Prior to version 4.12.6, users with the SYSTEM_CONFIGURATION permission could exploit include to read arbitrary local files (e.g., /etc/passwd, /proc/1/environ) b...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-21704

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

CVE-2025-21704

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usbcdcnotification, we can't calculate an expectedsize. Log an error and discard the notification instead of reading...

CGA-WQ37-VQPF-P8J4

Bulletin has no description...

seedparade.co.uk Improper Access Control vulnerability OBB-4027566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-49782

IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification...

CVE-2025-24989

An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update...

CVE-2025-1464

creationtimestamp| type| source ---|---|--- 2025-02-19 14:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijxmeey662o 2025-02-19 15:00:33+00:00| published-proof-of-concept| Telegram/76DozDHfzy3VuXpR0RrwuMltOqDKxavy520xjGJSvX85-I 2025-02-19 15:39:58+00:00| seen|...

CVE-2024-13533

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw4vnbn2p 2025-02-19 14:16:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnjyp5b2z 2025-02-19 16:14:03+00:00| seen|...

CVE-2024-13363

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtngtw523 2025-02-19 12:03:05+00:00| seen| https://t.me/cvedetector/18421 2025-02-19 15:39:58+00:00| seen|...

CVE-2024-13339

creationtimestamp| type| source ---|---|--- 2025-02-19 09:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijgtkwhnn23 2025-02-19 12:01:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijq3x4e7u26 2025-02-19 12:03:04+00:00| seen|...

CVE-2024-13674

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdkbnapc2t 2025-02-19 08:41:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4793 2025-02-19 12:01:18+00:00| seen|...

CVE-2024-13462

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdipsq332y 2025-02-19 08:41:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4789 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-13390

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdikvqwi2o 2025-02-19 15:39:51+00:00| seen| Telegram/6GJszkcWyUxdNxO416gIgUibBHOz4HHJ9FwvS945oXsyY0u...

CVE-2024-12069

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdidpgu32t 2025-02-19 08:41:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4792 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-11778

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdiaor432t 2025-02-19 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4787 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-11753

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdi5xvht2y 2025-02-19 08:41:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4786 2025-02-19 15:39:51+00:00| seen|...