CVE-2025-3445

A Path Traversal "Zip Slip" vulnerability was found in the mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the archiver, the Unarchi...

CVE-2025-3549

A flaw was found in the Open Asset Import Library Assimp, where the Assimp::MD3Importer::ValidateSurfaceHeaderOffsets function of the code/AssetLib/MD3/MD3Loader.cpp file of the component File Handler is affected. Manipulation leads to a heap-based buffer overflow. Mitigation Mitigation for this...

Citrix Virtual Apps and Desktops - ICA Launch failure, Connection was terminated by the server

When user tries to launch a session it fails with the error displayed in Citrix Workspace App: Connection was terminated by the server. Citrix Director displays User Connection Failures; Reason: Unavailable Licenses You can find the events in the Event Viewer on the Delivery Controller: Event ID:...

DEBIAN-CVE-2025-2814

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

CGA-HXX2-6CGR-6G38

Bulletin has no description...

CGA-9GV2-JV79-7V38

Bulletin has no description...

CVE-2025-3512

A flaw was found in QT. This vulnerability allows a heap-based buffer overflow via a specially crafted, incorrectly formatted markdown file. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...

WordPress AT Internet SmartTag plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin AT Internet SmartTag versions = 0.2...

CVE-2025-31672

A flaw was found in Apache POI's poi-ooxml component. This vulnerability allows attackers to manipulate file parsing behavior via specially crafted OOXML files containing ZIP entries with duplicate file names. Different systems can interpret these files differently, leading to inconsistent data...

CVE-2025-32460

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...

CVE-2025-3409

A flaw was found in stb. This vulnerability allows remote attackers to cause a stack-based buffer overflow via manipulation of the pathtoincludes argument. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

PT-2025-15360 · Unknown · Opplus Springboot-Admin

Name of the Vulnerable Software and Affected Versions: opplus springboot-admin versions up to a2d5310f44fd46780a8686456cf2f9001ab8f024 Description: A critical vulnerability has been found in the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads t...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, no details of the vulnerability are available...

CVE-2025-30195

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodym...

PT-2025-15216 · Eavb · Eavb

Name of the Vulnerable Software and Affected Versions: eAVB affected versions not specified Description: The issue is related to memory corruption that occurs while processing message content in eAVB. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2025-15206 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur when a guest VM is connected. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-15199 · Qualcomm · Snapdragon +57

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption can occur when the software processes addresses from TZ and MPSS requests without proper validation. Recommendations: At the moment, there is no information about a newer...

PT-2025-15284 · Libheif +3 · Libheif +3

Name of the Vulnerable Software and Affected Versions: libheif version 1.19.7 Description: The issue allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265. This is a Buffer Overflow vulnerability. Recommendations: For libheif version 1.19.7,...

PT-2025-18454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been identified in the Linux kernel related to virtiofs, where in certain scenarios, such as during fuzz testing, the source name may be NULL. This could lead to a...

CVE-2025-3136

A vulnerability was found in PyTorch that affects the torch.cuda.memory.cachingallocatordelete function in the c10/cuda/CUDACachingAllocator.cpp file. An attack must be conducted locally. The manipulation leads to memory corruption. Mitigation Mitigation for this issue is either not available or...