CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-28236

The Nautel VX Series transmitters running VX SW v6.4.0 and below are vulnerable to a remote code execution (RCE) flaw within the firmware update process. An attacker can execute arbitrary code by supplying a crafted update package to the /#/software/upgrades endpoint. To mitigate this risk, it is...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-28236

Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution RCE vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the //software/upgrades endpoint...

CVE-2025-3294

CVE-2025-3294 affects the WordPress WP Editor plugin up to version 1.2.9.1. The issue is an authenticated directory-traversal flaw (no proper file path validation) that can enable an attacker with Administrator-level access and above to overwrite arbitrary server files, potentially enabling remot...

SUSE-SU-2025:1262-1 Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059164 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tundetach bsc1232818. - CVE-2022-49563: crypto: qat - add param check for RSA bsc1238788. - CVE-2022-49564: crypto: qat - add param...

Debian: Security Advisory (DSA-5902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-3292 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationupdateprofiledetails due to missing validation on the 'userid' use...

PT-2025-16168 · WordPress · User Registration & Membership

Name of the Vulnerable Software and Affected Versions: User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress versions up to, and including, 4.1.3 Description: The issue allows unauthenticated attackers to update other users' passwords if they...

Debian: Security Advisory (DLA-4122-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libmozjs-128-0-128.9.0-1.1 on GA media (moderate)

libmozjs-128-0-128.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14975-1 Rating: moderate Cross-References: CVE-2025-3028 CVSS scores: CVE-2025-3028 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

CVE-2025-27475 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2025-26687

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-29812

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 17:46:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10964 2025-04-09 03:00:00+00:00| seen|...

APSB25-27 : Security update available for Adobe Experience Manager Forms

Adobe has released security updates for AEM Forms on JEE versions for a dependency on vulnerable Third-Party Component . This dependency update resolves an important vulnerability that could lead to path traversal and case sensitive match exception...

python311-ecdsa-0.19.1-1.1 on GA media (moderate)

python311-ecdsa-0.19.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14965-1 Rating: moderate Cross-References: CVE-2022-0778 CVSS scores: CVE-2022-0778 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

GraphicsMagick-1.3.45-2.1 on GA media (moderate)

GraphicsMagick-1.3.45-2.1 on GA media Announcement ID: openSUSE-SU-2025:14949-1 Rating: moderate Cross-References: CVE-2025-27795 CVE-2025-27796 CVSS scores: CVE-2025-27795 SUSE : 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L CVE-2025-27795 SUSE : 5.1...

istioctl-1.25.1-1.1 on GA media (moderate)

istioctl-1.25.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14938-1 Rating: moderate Cross-References: CVE-2025-30157 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2024-13710

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.0. This is due to missing or incorrect nonce validation on the 'estatebudsettings' page. This makes it possible for unauthenticated attackers to update...

SUSE-SU-2025:1004-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method bsc1238879...