BELL-CVE-2025-37804

Bulletin has no description...

BELL-CVE-2025-37834

Bulletin has no description...

BELL-CVE-2025-37820

Bulletin has no description...

BELL-CVE-2025-4207

Bulletin has no description...

BELL-CVE-2025-37803

Bulletin has no description...

BELL-CVE-2025-37806

Bulletin has no description...

BELL-CVE-2025-37823

Bulletin has no description...

BELL-CVE-2025-37807

Bulletin has no description...

BELL-CVE-2025-37814

Bulletin has no description...

BELL-CVE-2025-37800

Bulletin has no description...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

IBM Engineering Requirements Management DOORS Registration Information Disclosure

The vulnerability of the IBM Engineering Requirements Management DOORS Next software lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

PT-2025-20544 · Code Projects · Code-Projects Jewelery Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Jewelery Store Management system version 1.0 Description: A critical issue has been found in the Search Item View component, where the manipulation of the str2 argument leads to a stack-based buffer overflow. This issue can be...

PT-2025-22456 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the logon events aggregate report. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions 8510 and prior,...

WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.2.9...

Improper Certificate Validation

org.keycloak:keycloak-services is vulnerable to Improper Certificate Validation. The vulnerability is due to insecure default configuration due to setting the verification policy to 'ALL', which unintentionally skips trust store certificate verification...

CVE-2025-37830 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmicpufreqgetrate cpufreqcpugetraw can return NULL when the target CPU is not present in the policy-cpus mask. scmicpufreqgetrate does not check for this case, which results in a NULL pointer...

BIT-MASTODON-2023-49952

Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header...

PT-2025-20415 · My Company · Test

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows a bad person to break into the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-20430 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Azure, which allows an authorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...