Red Hat Undertow security vulnerabilities

Red Hat Undertow is a Java-based embedded web server from Red Hat, Inc. and is the default web server for Wildfly Java Application Server. Red Hat Undertow has a security vulnerability that stems from vulnerability to HTTP/2 DDoS attacks...

PT-2025-35473

Name of the Vulnerable Software and Affected Versions: RemoteClinic versions up to 2.0 Description: A flaw has been found in RemoteClinic that affects unknown code within the /staff/edit.php file. Manipulation of the Last Name argument can lead to cross-site scripting. The attack can be launched...

Saad Irfan RemoteClinic security vulnerability

Saad Irfan RemoteClinic is an open source application from Saad Irfan. Provides the ability to remotely manage your clinic via the web. A security vulnerability exists in Saad Irfan RemoteClinic 2.0 and earlier versions, which stems from information disclosure due to incorrect manipulation of the...

CVE-2025-9738 Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-9722

Portabilis i-Educar (up to 2.10) is affected. The vulnerability is a cross-site scripting in the file /intranet/educar_tipo_ocorrencia_disciplinar_cad.php, caused by improper handling of the nm_tipo/descricao (or nm_tipo_descricao) argument. It can be exploited remotely; public exploits exist. Co...

CVE-2025-9608

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/view of the component Formula de Cálculo de Média Page. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The...

PT-2025-35401

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A cross-site scripting issue exists in Portabilis i-Educar. The manipulation of the descricao argument within the /intranet/educar tipo ocorrencia disciplinar cad.php file can lead to...

Portábilis i-Educar security vulnerabilities

Portábilis i-Educar is an application from Portábilis. It can easily help you in basic and technical education. A security vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from cross-site scripting due to incorrect manipulation of the parameter nome/formulaMedia i...

Linux Distros Unpatched Vulnerability : CVE-2025-51824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcsp 2.0 is vulnerable to Buffer Overflow in the cspusartopen function at drivers/usart/zephyr.c. CVE-2025-51824 Note that Nessus relies on the presence of th...

Portábilis i-Educar security vulnerabilities

Portábilis i-Educar is an application from Portábilis. It can easily help you in basic and technical education. A security vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from cross-site scripting due to incorrect manipulation of the parameter nmnivel/descricao i...

i-Educar security vulnerabilities

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from cross-site scripting due to incorrect manipulation of the parameter nmtipo in the file /intranet/educartiporegimecad.php...

Linux Distros Unpatched Vulnerability : CVE-2025-8842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected by this issue is the function dodirective of the file preproc.c. The manipulation lead...

CVE-2025-9409

A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUpload of the file modules/system/controller/CommonController.go. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack...

CVE-2025-58216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jgwhite33 WP Thumbtack Review Slider wp-thumbtack-review-slider allows Stored XSS.This issue affects WP Thumbtack Review Slider: from n/a through = 2.6...

CVE-2025-9685

CVE-2025-9685 affects Portabilis i-Educar up to 2.10. The vulnerability is due to improper handling of the ID parameter in the /module/AreaConhecimento/view endpoint within the Listagem de áreas de conhecimento page, allowing remote SQL injection. Public exploit exists; risk includes potential un...

PT-2025-35344

Name of the Vulnerable Software and Affected Versions: Ocean Extra plugin for WordPress versions through 2.4.9 Description: The Ocean Extra plugin for WordPress is susceptible to Stored Cross-Site Scripting via the oceanwp library shortcode due to insufficient input sanitization and output escapi...

Linux Distros Unpatched Vulnerability : CVE-2019-14194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfsreadreply when calling storeblock in the...

Linux Distros Unpatched Vulnerability : CVE-2018-7637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability tha...

CVE-2025-9619

CVE-2025-9619 affects E4 Sistemas Mercatus ERP 2.00.019. The vulnerability is due to manipulation of an unknown function in the file /basico/webservice/imprimir-danfe/id/, causing improper control of resource identifiers. Exploitation can be performed remotely. Multiple sources (NVD, Red Hat, CVE...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service (CVE-2025-36047)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service with the servlet-3.1, servlet-4.0, servlet-5.0, or servlet-6.0 feature with the HTTP/2 protocol enabled. Vulnerability Details Refer to the security bulletins...