CVE-2025-39245

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite that originates from CSV injection and could lead to the execution of arbitrary commands...

PT-2025-35331

Name of the Vulnerable Software and Affected Versions SUSE Fleet versions prior to v0.14.0 SUSE Fleet version v0.13.1 SUSE Fleet version v0.12.6 SUSE Fleet version v0.11.10 Description A vulnerability exists in SUSE Fleet when managing Helm charts, where sensitive information passed through...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to an unvalidated return value, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to unvalidated return values. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2025-35170

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite affected versions not specified Description: A CSV Injection issue exists in HikCentral Master Lite. This could allow an attacker to inject executable commands through malicious CSV data. Recommendations: At the moment,...

Security Bulletin: Db2 Bridge Release 1.1.1

Summary This issue Affected users using Db2 Bridge 1.1.1 and new Fix pack was release to address the issue. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated...

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...

Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficientl...

PT-2025-35067

Name of the Vulnerable Software and Affected Versions: WooCommerce csv import export versions through 2.0.6 Description: The software contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' issue. This allows for Path Traversal. Recommendations: Update WooCommerce...

Linux Distros Unpatched Vulnerability : CVE-2019-9211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a reachable assertion abort in the function writelongstringmissingvalues in data/sys-file- writer.c in libdata.a in GNU PSPP 1.2.0 that will lead to...

Linux Distros Unpatched Vulnerability : CVE-2024-9102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpLDAPadmin since at least version 1.2.0 through the latest version 1.2.6.7 allows users to export elements from the LDAP directory into a Comma-Separated Valu...

Mahara 安全漏洞

Mahara is a free open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 23.04.8 and 24.04.4, which stems from an external RSS feed link attribute containing malicious values that could lead to a cross-site scripting attack...

Security Bulletin: Security Vulnerabilities in node.js packages affect IBM Voice Gateway

Summary Security Vulnerabilities in node.js packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is...

CVE-2025-51281

D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en, val and id parameters in the qjasp function. This vulnerability allows authenticated attackers to cause a Denial of Service DoS by sending crafted GET requests with overly long values for these parameters...

CVE-2024-39923

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting XSS due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in...

Mahara 安全漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions prior to 24.04.2 and prior to 23.04.7, which stems from an uncleaned About, Contact, and Help footer link values that could lead to a cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2016-6623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service DoS attack on a server by passing large values to a loop. All 4.6.x...

PT-2025-34609 · Mahara · Mahara

Name of the Vulnerable Software and Affected Versions: Mahara versions 23.04 through 23.04.7 Mahara versions 24.04 through 24.04.2 Description: An issue exists in Mahara where the About, Contact, and Help footer links are susceptible to Cross Site Scripting XSS due to insufficient input...

CVE-2024-39923

CVE-2024-39923 affects Mahara, specifically versions Mahara 23.04 before 23.04.7 and 24.04 before 24.04.2. The issue stems from the About, Contact, and Help footer links not being sanitised, allowing cross-site scripting (XSS). The links are configurable by an administrator but are clickable by a...