12714 matches found
PT-2025-27467 · Akamai · Akamai Cloudtest
Name of the Vulnerable Software and Affected Versions: Akamai CloudTest versions prior to 60 2025.06.02 12988 Description: Akamai CloudTest is susceptible to an XML External Entity XXE injection flaw. This allows for file inclusion by manipulating XML input, potentially leading to unauthorized...
PT-2025-23536 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...
DLA-4204-1 twitter-bootstrap3 - security update
Bulletin has no description...
RHBA-2025:2973 Red Hat Bug Fix Advisory: mod_proxy_cluster bug fix update
Bulletin has no description...
PT-2025-23367 · WordPress · Relevanssi
Name of the Vulnerable Software and Affected Versions: Relevanssi – A Better Search plugin for WordPress versions up to, and including, 4.24.5 Free and 2.27.6 Premium Description: The issue is related to Stored Cross-Site Scripting via the Excerpt Highlights due to insufficient input sanitization...
DLA-4198-1 espeak-ng - security update
Bulletin has no description...
PYSEC-2025-55
vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...
CVE-2025-48942 vLLM DOS: Remotely kill vllm over http with invalid JSON schema
vLLM is an inference and serving engine for large language models LLMs. In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid jsonschema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex...
RHSA-2025:8325 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
RHSA-2025:8322 Red Hat Security Advisory: pcs security update
Bulletin has no description...
RHBA-2025:4872 Red Hat Bug Fix Advisory: rpm-ostree bug fix and enhancement update
Bulletin has no description...
CVE-2025-48880 FreeScout has Race Condition When Deleting Users
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is the the possibility of a race condition occurring. This issue has been patched in version 1.8.181...
DSA-5932-1 thunderbird - security update
Bulletin has no description...
PT-2025-23279 · WordPress · Woo Slider Pro
Name of the Vulnerable Software and Affected Versions: The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress versions up to, and including, 1.12 Description: The issue allows authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts du...
PT-2025-23302 · Unknown · Product Manager
Name of the Vulnerable Software and Affected Versions: Product Manager versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2025x Description: A stored Cross-site Scripting XSS vulnerability in Product Manager allows an attacker to execute arbitrary script code in a user's browser session. This...
PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller
Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...
PT-2025-23319
Name of the Vulnerable Software and Affected Versions Yandex Browser for Desktop versions prior to 24.4.0.682 Description A use after free memory corruption issue exists. Recommendations For versions prior to 24.4.0.682, update to version 24.4.0.682 or later to resolve the issue...
CVE-2025-30466
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy...