PT-2025-28818 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28562 · Microsoft · Windows User-Mode Driver Framework Host +1

Name of the Vulnerable Software and Affected Versions: Windows User-Mode Driver Framework Host affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information locally due to the exposure of sensitive information to an unauthorized actor in...

PT-2025-28656 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue is related to improper input validation. This occurs due to the bypassing of client-side validation for data types and the requiredness of fields for GRC Objects. When ...

PT-2025-28793 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator is affected by an Integer Overflow or Wraparound issue that may lead to arbitrary code execution within the current user's context...

PT-2025-28775 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-28403 · Siemens · Ruggedcom Rsg910C +17

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RMC8388 versions prior to V5.10.0 RUGGEDCOM RMC8388NC versions prior to V5.10.0 RUGGEDCOM RS416NCv2 versions prior to V5.10.0 RUGGEDCOM RS416PNCv2 versions prior to V5.10.0 RUGGEDCOM RS416Pv2 versions prior to V5.10.0 RUGGEDCOM...

CVE-2025-53532 giscus allows unauthorized discussion creation

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauthorized user to create discussions on any repository where giscus is installed. This affects the server-side part of giscus, which is provided via http://giscus.app or your own...

WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Super Store Finder versions 7.8...

Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function

The parisneo/lollms repository is affected by a timing attack vulnerability in the authenticateuser function within the lollmsauthentication.py file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The...

GHSA-W42R-MRX7-C633 LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting the Papers Loaders package before version 0.3.2 in llama-index v0.10.0 and above through v0.12.29. This vulnerability allows ...

CVE-2025-3920 Hard-coded Password in SUR-FBD CMMS

A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extra...

BELL-CVE-2025-38218

Bulletin has no description...

BELL-CVE-2025-38217

Bulletin has no description...

BELL-CVE-2025-38207

Bulletin has no description...

BELL-CVE-2025-38185

Bulletin has no description...

BELL-CVE-2025-38222

Bulletin has no description...

BELL-CVE-2025-38182

Bulletin has no description...

BELL-CVE-2025-38181

Bulletin has no description...

BELL-CVE-2025-38234

Bulletin has no description...

PT-2025-28219 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.3 Description: A critical issue was identified in WeGIA, a web manager for charitable institutions. The /html/funcionario/profile funcionario.php endpoint is vulnerable due to the id funcionario parameter not being...