Intel Gaudi security vulnerabilities

Intel Gaudi is a high-performance AI training and reasoning gas pedal from Intel Corporation USA. A security vulnerability exists in Intel Gaudi versions prior to 1.18, which stems from incorrect default permissions and could lead to elevated privileges...

Bullfrog security vulnerabilities

Bullfrog is a simple plug-and-play Github tool open-sourced by Bullfrog Security. A security vulnerability exists in Bullfrog versions prior to 0.8.4, which stems from improper use of TCP leading to DNS data exfiltration that may bypass sandbox restrictions...

PT-2025-21162 · Unknown +1 · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense CE versions prior to 2.8.0 beta release corresponding Plus builds versions prior to 2.8.0 beta release Description: The issue is related to command injection in the OpenVPN widget due to improper sanitization of user-supplied input to...

Drupal Cross-Site Request Forgery Vulnerability

Drupal is an open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal versions prior to 1.3.0 that stems from vulnerability to cross-site request forgery attacks...

PT-2025-21161 · Netgate · Pfsense Ce

Name of the Vulnerable Software and Affected Versions: Netgate pfSense CE versions prior to 2.8.0 beta release Netgate pfSense CE corresponding Plus builds versions prior to 2.8.0 beta release Description: The issue is related to Cross Site Scripting XSS in the widgets/log.widget.php file. This...

CVE-2025-20006

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-4658

Removed by vendor...

PT-2025-20917

Name of the Vulnerable Software and Affected Versions: OXID eShop versions prior to 7 Description: An issue in OXID eShop allows CMS pages, when used in combination with Smarty, to potentially display user information if a CMS page contains a Smarty syntax error. Recommendations: For versions pri...

PT-2025-20927 · Unknown · Openpubkey

Name of the Vulnerable Software and Affected Versions: OpenPubkey versions prior to 0.10.0 Description: The issue allows a specially crafted JWS to bypass signature verification. Recommendations: For versions prior to 0.10.0, update to version 0.10.0 or later to resolve the issue. As a temporary...

PT-2025-20765

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description The issue allows an attacker in a privileged network position to intercept network traffic. This was addressed through improved state management. Recommendations For iOS...

Sparx Systems Pro Cloud Server security vulnerabilities

Sparx Systems Pro Cloud Server is an enterprise-class model collaboration platform from Sparx Systems Australia that supports cloud sharing and version control of EA Enterprise Architect models. A security vulnerability exists in Sparx Systems Pro Cloud Server versions prior to 6.0.165, which ste...

CVE-2025-27695

Dell Wyse Management Suite, versions prior to WMS 5.1 contain an Authentication Bypass by Spoofing vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure...

Znuny security vulnerabilities

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions prior to 7.1.5 that stems from passwords not being fully masked, which could lead to information disclosure...

LibreOffice Improper Validation of Array Index vulnerability (May 2025) - Linux

LibreOffice is prone to an improper validation of array index vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-20979

Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code...

WordPress plugin “Easy PayPal Buy Now Button” has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

RT-Labs P-Net security vulnerabilities

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which stems from an unchecked loop condition that can be...

PT-2025-20064

Name of the Vulnerable Software and Affected Versions Android versions prior to 15 Description The issue is an out-of-bounds write in libsavscmn, which allows local attackers to execute arbitrary code. This can be exploited by local attackers. Recommendations For versions prior to Android 15,...

CVE-2025-20949: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members...

RT-Labs P-Net buffer error vulnerability

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which can be exploited by an attacker to cause an IO...