CVE-2025-27003

Cross-Site Request Forgery CSRF vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Site Request Forgery.This issue affects Quick Paypal Payments: from n/a through = 5.7.46...

CVE-2025-58829

Server-Side Request Forgery SSRF vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One: from n/a through = 2.3.3...

CVE-2025-36100

IBM MQ LTS 9.1.0.0 through 9.1.0.29, 9.2.0.0 through 9.2.0.36, 9.3.0.0 through 9.3.0.30 and 9.4.0.0 through 9.4.0.12 and IBM MQ CD 9.3.0.0 through 9.3.5.1 and 9.4.0.0 through 9.4.3.0 Java and JMS stores a password in client configuration files when trace is enabled which can be read by a local...

BELL-CVE-2025-39716

Bulletin has no description...

BELL-CVE-2025-39698

Bulletin has no description...

BELL-CVE-2025-39694

Bulletin has no description...

BELL-CVE-2025-39689

Bulletin has no description...

BELL-CVE-2025-39683

Bulletin has no description...

BELL-CVE-2025-38737

Bulletin has no description...

CVE-2025-36892

Denial of service...

MAL-2025-44517 Malicious code in halley-barnard-kaus-transport (npm)

The package halley-barnard-kaus-transport was found to contain malicious code...

BELL-CVE-2025-38702

Bulletin has no description...

BELL-CVE-2025-38697

Bulletin has no description...

BELL-CVE-2025-38686

Bulletin has no description...

BIT-POWERSHELL-2023-21538 .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability...

The vulnerability of the integrated development environment for software, IntelliJ IDEA, related to authentication errors, allows attackers to discover hidden files.

The vulnerability of the IntelliJ IDEA integrated development environment is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to discover hidden files...

WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Assembly versions = 1.1...

Malicious code in parser-tson (npm)

The package parser-tson was found to contain malicious code...

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink products lies in insufficient verification of input data. This allows attackers to compromise the integrity of the protected information.

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink devices is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

AZL-66731 CVE-2025-58058 affecting package podman for versions less than 5.6.1-2

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...