CVE-2025-47203

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used...

CVE-2024-51991 October CMS Allows Unprotected SVG Rename in Media Manager

October is a Content Management System CMS and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the media.cleanvectors configuration enabled. This configuration will sanitize SVG files uploaded using the media manager. This...

Output Messenger security vulnerabilities

Output Messenger is an enterprise-grade instant messaging and collaboration software from Output Messenger, Inc. that provides secure internal communications, file sharing, screen sharing and remote desktop control. A security vulnerability exists in Output Messenger versions prior to 2.0.63, whi...

Buoyant Edge security vulnerability

Buoyant Edge is a Linkerd lightweight edge agent from Buoyant. A security vulnerability exists in Buoyant Edge versions prior to 25.2.1, which stems from the fact that metric data may consume a large amount of agent memory, leading to resource exhaustion...

IBM Business Automation Workflow Access Control Vulnerability

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An access control error vulnerability exists in IB...

Open Policy Agent security vulnerabilities

Open Policy Agent OPA is an open-source, general-purpose policy engine from Open Policy Agent Open Source that enables unified, context-aware policy enforcement across the stack. A security vulnerability exists in Open Policy Agent versions prior to 1.4.0, which stems from an HTTP Data API that...

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 136.0.7103.59, which stems from an application boundary error when handling untrusted input, and can be exploited by an attacker to cause heap corruption...

PT-2025-18683 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.9 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete Remote Code Execution RCE through the backend JDBC link. This issue has been...

PT-2025-18514

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1 Description A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the kprobe event gen test exit function. This issue occurs when the trace get event file...

Amazon Linux 2 : qt (ALAS-2025-2847)

The version of qt installed on the remote host is prior to 4.8.5-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2847 advisory. In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization...

Joplin security vulnerabilities

Joplin is an open source note-taking and to-do list application from the individual developer Laurent Cozic. A security vulnerability exists in Joplin versions prior to 3.3.3, which stems from a path traversal that may result in reading files outside the expected directory...

UBUNTU-CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability affects Firefox 1...

libsnowflakeclient security vulnerability

libsnowflakeclient is a Snowflake open source Snowflake tool. A security vulnerability exists in libsnowflakeclient versions prior to 0.5.0 through 2.2.0, which stems from the fact that incorrectly handling malformed requests may cause the application to hang...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 138, which stems from a memory corruption that could lead to the execution of arbitrary code...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from an attacker's ability to disclose sensitive information or elevate privileges using a privileged UITour act...

PT-2025-46935

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 136.0.7103.59 Description An improper implementation in the DevTools component of Google Chrome could allow a remote attacker to potentially escape the sandbox through a crafted HTML page. Recommendations Update...

Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from a modification of certain WebGL shader attributes that could lead to out-of-bounds reads, which in...

ImageMagick security vulnerabilities

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.1.1-44 that stems from improper image depth handling in MIFF image processing...

PT-2025-54829

Name of the Vulnerable Software and Affected Versions utls versions prior to 1.7.0 Description The utls software did not implement the TLS 1.3 downgrade protection mechanism as specified in RFC 8446 Section 4.1.3 when a utls ClientHello specification was used. This allowed a network attacker to...

PT-2025-17525 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue affects WPAMS, allowing for Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting. Recommendations: For versions prior to...