CVE-2025-20911

Improper access control in semwifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch...

CVE-2025-20918: Out-of-bounds Read

Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

Amazon Linux 2 : libpq (ALASPOSTGRESQL13-2025-010)

The version of libpq installed on the remote host is prior to 13.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2POSTGRESQL13-2025-010 advisory. Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeStrin...

EPICOR Prophet 21 security vulnerability

EPICOR Prophet 21 is an enterprise resource planning software from EPICOR, Inc. that is used for enterprise resource management, pricing, and other operations. A security vulnerability exists in EPICOR Prophet 21 version 23.2.5232 and prior versions, which stems from uncleaned user input fields a...

Finder ERP SQL injection vulnerability

Finder ERP is an enterprise resource planning software from Finder Turkey. An SQL injection vulnerability exists in Finder ERP versions prior to 18.12.2024, which stems from improper validation of input syntax correctness and could lead to SQL injection...

FastGPT code issues and vulnerabilities

FastGPT is labring open source a large language model based on the open source knowledge base question and answer system. A code issue vulnerability exists in FastGPT versions prior to 4.9.0, which stems from the web crawler plugin not performing intranet IP validation, which could lead to the...

SUSE CVE-2025-1866

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32...

Vasion Print security vulnerability

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923, which stems from hard-coded IdP keys...

Vasion Print authorization issue vulnerability

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 and Application 20.0.1923 that stems from the presence of a session fixation issue...

Boceksoft Informatics E-Travel SQL Injection Vulnerability

Boceksoft Informatics E-Travel is an application from Boceksoft. A SQL injection vulnerability exists in Boceksoft Informatics E-Travel versions prior to 15.12.2024, which stems from the presence of SQL injection...

Devolutions Server security vulnerabilities

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.12 and prior versions that stems from improper authorization and allows bypassing the...

Google Chrome < 134.0.6998.44 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 134.0.6998.44. It is, therefore, affected by multiple vulnerabilities as referenced in the 202503stable-channel-update-for-desktop advisory. - Use after free in Profiles. CVE-2025-1916 - Out of bounds read in V8...

CVE-2025-27424

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page This vulnerability affects Firefox for iOS 136...

CVE-2025-27425

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first This vulnerability affects Firefox for iOS 136...

UBUNTU-CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox 136 and Thunderbird 136...

UBUNTU-CVE-2025-27426

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL This vulnerability affects Firefox for iOS 136...

CVE-2025-22837

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference...

Uniguest Tripleplay code injection vulnerability

Uniguest Tripleplay is a multimedia player from Uniguest. A security vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that originates from unauthorized remote code execution...

Uniguest Tripleplay SQL Injection Vulnerability

Uniguest Tripleplay is a multimedia player from Uniguest. A SQL injection vulnerability exists in Uniguest Tripleplay versions prior to 24.2.1 that stems from SQL injection...

PT-2025-9669

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 136 Description A spoofing issue exists where websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. Recommendations For Firefox for iOS versions prior ...