CVE-2025-64434 affecting package kubevirt for versions less than 1.5.3-2

CVE-2025-64434 affecting package kubevirt for versions less than 1.5.3-2. An upgraded version of the package is available that resolves this issue...

WordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Turitor versions 1.5.3...

CVE-2025-54407

Stored cross-site scripting vulnerability exists in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. If a user accesses a crafted page or URL, an arbitrary script may be executed on the web browser of the user...

EUVD-2024-55304

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. Under certain conditions, IPsec may allow code injection in the affected device. An attacker could leverage this scenario to execute arbitrary code as root user...

CVE-2025-14332

Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 146 and Thunderbird 146...

UBUNTU-CVE-2025-14326

Use-after-free in the Audio/Video: GMP component. This vulnerability affects Firefox 146 and Thunderbird 146...

CVE-2025-20387 Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on...

CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8

CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8. A patched version of the package is available...

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6

CVE-2025-47913 affecting package kubevirt for versions less than 1.5.0-6. A patched version of the package is available...

AZL-70580 CVE-2025-61661 affecting package grub2 for versions less than 2.06-26

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...

CVE-2025-9230 affecting package openssl for versions less than 1.1.1k-37

CVE-2025-9230 affecting package openssl for versions less than 1.1.1k-37. A patched version of the package is available...

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39961 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-7633

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report...

libssh: out-of-bounds read in sftp_handle()

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in...

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-64198 WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 10.7.1...

CVE-2025-62036 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2

CVE-2022-3064 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...