Linux Distros Unpatched Vulnerability : CVE-2022-23773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access...

Linux Distros Unpatched Vulnerability : CVE-2025-38236

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in...

CVE-2025-52731 WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through 4.0.24...

PT-2025-33208 · Unknown · Lcweb Global Gallery

Name of the Vulnerable Software and Affected Versions: LCweb Global Gallery versions n/d through 9.2.3 Description: A missing authorization flaw in LCweb Global Gallery allows exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no...

PT-2025-33253

Name of the Vulnerable Software and Affected Versions: ThemeMove Unicamp versions through 2.6.3 Description: This issue involves an improper control of filename for include/require statements in a PHP program, leading to a PHP Local File Inclusion. Recommendations: Update ThemeMove Unicamp to a...

Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility

Summary There are multiple vulnerabilities in IBM® Semeru Runtime Certified Edition 11 and IBM® Semeru Runtime Certified Edition 21 that are used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in...

CVE-2024-55402

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...

CVE-2024-55402

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...

PT-2025-32100 · Qualcomm · Smr Aug-2025 Release 1

Name of the Vulnerable Software and Affected Versions: versions prior to SMR Aug-2025 Release 1 Description: An improper access control issue exists in accessing a system device node. This allows local attackers to access the device identifier. Recommendations: Update to SMR Aug-2025 Release 1 or...

CVE-2024-55402

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...

PT-2025-32084 · Parcel · Parcel

Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the playback control screen display. Recommendations: At the...

CVE-2024-55402

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...

PT-2025-32208 · 4C Strategies · Exonaut

Name of the Vulnerable Software and Affected Versions: 4C Strategies Exonaut versions prior to 22.4 Description: The software contains an access control issue. Recommendations: Update to version 22.4 or later...

CVE-2024-55402

CVE-2024-55402 affects 4C Strategies Exonaut prior to v22.4, with an access control issue. The vulnerability is described with a low confidentiality impact (C:L) and no integrity/availability impact, and no authentication privileges needed (PR:N). Exploitation details are not provided in the docu...

Linux Distros Unpatched Vulnerability : CVE-2024-40949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix getting incorrect lruvec when replacing a shmem folio When testing shmem...

CVE-2025-26062

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings...

CVE-2025-26062

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings...

CVE-2024-42655

An access control issue in NanoMQ v0.21.10 allows attackers to bypass security restrictions and access sensitive system topic messages using MQTT wildcard characters...

CVE-2025-29557

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords...

PT-2025-31572 · Intelbras · Intelbras Rx3000 +1

Name of the Vulnerable Software and Affected Versions: Intelbras RX1500 version 2.2.9 Intelbras RX3000 version 1.0.11 Description: An access control issue allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings...