17029 matches found
BELL-CVE-2025-38362
Bulletin has no description...
BELL-CVE-2025-38368
Bulletin has no description...
BELL-CVE-2025-38360
Bulletin has no description...
BELL-CVE-2025-38457
Bulletin has no description...
BELL-CVE-2025-38460
Bulletin has no description...
BELL-CVE-2025-38415
Bulletin has no description...
BELL-CVE-2025-38420
Bulletin has no description...
BELL-CVE-2025-38449
Bulletin has no description...
BELL-CVE-2025-38391
Bulletin has no description...
BELL-CVE-2025-38359
Bulletin has no description...
BELL-CVE-2025-38386
Bulletin has no description...
CVE-2025-54378 HAX CMS Backend Lacks Comprehensive Authorization Checks
HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php, API endpoints do not perform authorization checks when interacting with a resource. Both the JS and PHP versions of the CMS...
CVE-2025-38454 ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
In the Linux kernel, the following vulnerability has been resolved: ALSA: ad1816a: Fix potential NULL pointer deref in sndcardad1816apnp Use prwarn instead of devwarn when 'pdev' is NULL to avoid a potential NULL pointer dereference...
CVE-2025-38401 mtk-sd: Prevent memory corruption from DMA map failure
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdcpreparedata fails to map the DMA region, the request is not prepared for data receiving, but msdcstartdata proceeds the DMA with previous setting. Since this will lead...
MAL-2025-6237 Malicious code in gafana-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4e648e988f33de6b085bf631d45494adb7b9be241071b454c40705384ad7e6e The OpenSSF Package Analysis project identified 'gafana-test-utils' @...
BELL-CVE-2025-54566
Bulletin has no description...
BELL-CVE-2025-54567
Bulletin has no description...
PT-2025-30900
Name of the Vulnerable Software and Affected Versions tawk.to Live Chat version 1.6.1 Description A Cross Site Scripting issue exists in tawk.to Live Chat. The web application stores and displays user-supplied input without proper input validation or encoding, potentially allowing a remote attack...
PT-2025-30888
Name of the Vulnerable Software and Affected Versions Gardyn version 4 Description An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute arbitrary code via a request. Recommendations At the moment, there is no information about a newer version that contains a f...