CVE-2025-59146 New API has Authenticated Server-Side Request Forgery (SSRF) issue

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. An authenticated Server-Side Request Forgery SSRF vulnerability exists in versions prior to 0.9.0.5. A feature within the application allows authenticated users to submit a URL for the server to...

CVE-2025-59146 New API has Authenticated Server-Side Request Forgery (SSRF) issue

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. An authenticated Server-Side Request Forgery SSRF vulnerability exists in versions prior to 0.9.0.5. A feature within the application allows authenticated users to submit a URL for the server to...

EUVD-2025-33397

A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX4700 devices allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When forwarding-options sampling is enabled, receipt of any traffic destined to the...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796 Vulnerability Details CVEID:CVE-2021-32796 DESCRIPTION: xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParse...

CVE-2025-47349

Memory corruption while processing an escape call...

CVE-2025-47351

Memory corruption while processing user buffers...

EUVD-2025-33247

Memory corruption while processing a malformed license file during reboot...

EUVD-2025-33241

Information disclosure while processing batch command execution in Video driver...

CVE-2025-27045 Buffer Over-read in Video

Information disclosure while processing batch command execution in Video driver...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

CVE-2025-27041 Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware...

EUVD-2025-33250

Transient DOS while processing video packets received from video firmware...

CVE-2025-27040

CVE-2025-27040 affects Qualcomm TZ Firmware in chipsets; root cause is improper input validation when processing hypervisor logs, leading to information disclosure (confidentiality impact). Reported across Red Hat/NVD/CVE listings with no confirmed exploit details. Some sources note no public fix...

EUVD-2025-33243

Information disclosure may occur while processing the hypervisor log...

SUSE SLES15 Security Update : kernel RT (Live Patch 10 for SLE 15 SP6) (SUSE-SU-2025:03495-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03495-1 advisory. This update for the Linux Kernel 6.4.0-1506001034 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

PT-2025-41352

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47351 Description A memory corruption issue exists when processing user-supplied buffers. This can potentially lead to unexpected behavior or compromise of the system. Recommendations At the moment, there is no informati...

PT-2025-41337

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Information disclosure may occur while processing the hypervisor log. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-41351

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when processing an escape call. The issue could potentially allow for unexpected behavior or code execution. Recommendations At the moment, there is no information...

Tenda AC20 strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogramming router Tenda AC20 is related to the operation of writing data beyond the buffer boundaries during the processing of the MAC parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK X6000R Set WiFi Acl Rules Command Execution

The vulnerability of the setWiFiAclRules function in the TOTOLINK X6000R router software lies in the lack of measures taken to neutralize special elements during the processing of the desc parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...