12569 matches found
PT-2025-26999 · Unknown · Backdrop Cms
Name of the Vulnerable Software and Affected Versions: Backdrop CMS version 1.30 Description: A Cross-Site Scripting XSS issue exists in the node creation form. Recommendations: For Backdrop CMS version 1.30, update to a version that includes a fix for this issue...
PT-2025-30923 · Salesforce · Tableau Server
Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: An authorization bypass issue exists in Salesforce Tableau Server on Windows and Linux due to a...
PT-2025-30922 · Salesforce · Tableau Server
Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: An authorization bypass issue exists in Salesforce Tableau Server on Windows and Linux, specifically...
PT-2025-26949
Name of the Vulnerable Software and Affected Versions: neqo versions 0.4.24 through 0.13.2 Description: The issue is related to an Improper Input Validation vulnerability in Mozilla neqo, which leads to an unexploitable crash. Recommendations: For neqo versions 0.4.24 through 0.13.2, update to a...
CVE-2025-29331
An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates...
CVE-2024-56915
Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...
PT-2025-30919 · Salesforce · Tableau Server
Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: A flaw exists in Salesforce Tableau Server on Windows and Linux that allows an authorization bypass...
MGASA-2025-0196 Updated chromium-browser-stable packages fix security vulnerabilities
Integer overflow in V8. CVE-2025-6191 Use after free in Profiler. CVE-2025-6192...
CVE-2025-5832
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...
CVE-2025-5832
Pioneer DMH-WT7600NEX Software Update Signing insufficient verification of data authenticity is documented as a vulnerability. The flaw lies in the software update verification process where data in the update is not fully validated, allowing a physically present attacker to execute arbitrary cod...
CVE-2025-5832 Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...
CVE-2025-5832 Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability
Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Pioneer DMH-WT7600NEX devices. Authentication is not required to exploit this...
CVE-2025-52893 OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...
MGASA-2025-0195 Updated nss & firefox packages fix security vulnerabilities
CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. CVE-2025-5264: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this...
RHSA-2025:9605 Red Hat Security Advisory: perl-File-Find-Rule security update
Bulletin has no description...
RHSA-2025:9569 Red Hat Security Advisory: gimp:2.8 security update
Bulletin has no description...
RHSA-2025:9526 Red Hat Security Advisory: pam security update
Bulletin has no description...
RHSA-2025:9517 Red Hat Security Advisory: perl-File-Find-Rule security update
Bulletin has no description...