12577 matches found
PT-2025-27565 · Unknown · Conprosys Hmi System
Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.7.7 Description: The issue is related to Cross-Site Scripting XSS in the getqsetting.php functionality, which could allow reflected execution of scripts in the browser on interaction...
PT-2025-27574 · Pillow · Pillow
Name of the Vulnerable Software and Affected Versions: Pillow versions 11.2.0 through 11.2.x Description: The issue is a heap buffer overflow that occurs when writing a sufficiently large image in the DDS format. This happens because the library writes into a buffer without checking for available...
PT-2025-27616
Name of the Vulnerable Software and Affected Versions Model Context Protocol Servers Filesystem versions prior to 0.6.4 Model Context Protocol Servers Filesystem versions prior to 2025.7.01 Description An issue exists in the server-filesystem implementation of the Model Context Protocol MCP due t...
SLNX Help Documentation of RICOH Streamline NX vulnerable to reflected cross-site scripting
Overview SLNX Help Documentation of RICOH Streamline NX provided by Ricoh Company, Ltd. contains a reflected cross-site scripting vulnerability. Reflected cross-site scripting via a specific parameter CWE-79 - CVE-2025-41439 Matteo Santini reported this vulnerability to Ricoh Company, Ltd. direct...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses nanoid-3.3.7.tgz which is vulnerable to CVE-2024-55565
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses nanoid-3.3.7.tgz which is vulnerable to CVE-2024-55565. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-55565 DESCRIPTION: nanoid aka Nano ID before...
JVN#24333956: SLNX Help Documentation of RICOH Streamline NX vulnerable to reflected cross-site scripting
SLNX Help Documentation of RICOH Streamline NX provided by Ricoh Company, Ltd. contains the following vulnerability. Reflected cross-site scripting via a specific parameter CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Base Score 5.1...
PT-2025-30211
Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.6.1 through 3.6.3 Description A timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS7 padding mode is used. Recommendations Update to version 3.6.4 or later...
PT-2025-27400 · Samsung +1 · Rlottie +1
Name of the Vulnerable Software and Affected Versions: rLottie version V0.2 Description: The issue is related to an Improper Input Validation vulnerability in Samsung Open Source rLottie, which allows Overread Buffers. Recommendations: For rLottie version V0.2, update to a version that includes a...
Huawei EulerOS: Security Advisory for abseil-cpp (EulerOS-SA-2025-1683)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-27464 · Electron · Electron
Name of the Vulnerable Software and Affected Versions: Electron versions prior to 28.3.2 Electron versions prior to 29.3.3 Electron versions prior to 30.0.3 Description: The issue is related to heap buffer overflows in Electron's API, specifically affecting the nativeImage.createFromPath and...
PT-2025-28013
Name of the Vulnerable Software and Affected Versions: MbedTLS versions 3.3.0 through 3.6.3 Description: The issue arises from the function mbedtls lms import public key not checking if the input buffer is at least 4 bytes before reading a 32-bit field. This allows for a possible out-of-bounds re...
Important Photon OS Security Update - PHSA-2025-5.0-0544
Updates of 'sudo' packages of Photon OS have been released...
PT-2025-27370 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions up to 13.2 Description: A problematic issue has been found in SeaCMS, affecting some unknown functionality of the file /admin type.php. This issue leads to cross-site request forgery and can be exploited remotely...
CGA-5RGH-38CV-H5PQ
Bulletin has no description...
CVE-2025-53097 Roo Code extension vulnerable to Potential Information Leakage via JSON Schema
Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's searchfiles tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker who was able to inject a prompt into the agent coul...
CVE-2025-5832
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...
RHSA-2025:9845 Red Hat Security Advisory: weldr-client security update
Bulletin has no description...
RHSA-2025:9844 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...