Linux Distros Unpatched Vulnerability : CVE-2025-5819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 15.7 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed...

NGINX Proxy Manager Auth Bypass

The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux dwc3_check_event_buf Buffer Overflow

The vulnerability of the dwc3checkeventbuf function in the Linux operating system is related to reading memory beyond the boundaries of the allocated buffer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the protected information...

KATYUsha M348 Disclosure Information

The vulnerability of the web control panel of the multifunctional device KATYUsha M348 is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker operating remotely to disclose the protected information...

ABAP Application Server Unauthorized Access

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP BIC Document is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker,...

Synology DiskStation Manager Authentication Module Certificate Validation Unauthorized Access

The vulnerability of the system-mounted authentication module in the Synology DiskStation Manager DSM is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-25735

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers PRRs, allowing attackers with software running on the system to modify SPI flash in real-time...

CVE-2025-7956

The Ajax Search Lite plugin for WordPress is vulnerable to Basic Information Exposure due to missing authorization in its AJAX search handler in all versions up to, and including, 4.13.1. This makes it possible for unauthenticated attackers to issue repeated AJAX requests to leak the content of a...

CVE-2025-57756

Contao is an Open Source CMS. In versions starting from 4.9.14 and prior to 4.13.56, 5.3.38, and 5.6.1, protected content elements that are rendered as fragments are indexed and become publicly available in the front end search. This issue has been patched in versions 4.13.56, 5.3.38, and 5.6.1. ...

CVE-2025-57757

Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround...

Linux Distros Unpatched Vulnerability : CVE-2023-2022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting...

Linux Distros Unpatched Vulnerability : CVE-2021-22226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9 CVE-2021-222...

Linux Distros Unpatched Vulnerability : CVE-2021-22253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to protected...

FIELDVUE ValveLink Uncontrolled Search Compromise

The vulnerability of FIELDVUE Emerson ValveLink software products regarding configuration, calibration, and diagnostics is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to compromise the accessibility of protected information...

TestWfsPost Component Unauthorized Access

The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Phoenix Contact CHARX SEC-3000 Module Buffer Overflow

The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...

RUGGEDCOM RST2428P Load Configuration from Local PC Data Compromise

The vulnerability of the “Load Configuration from Local PC” web interface component of the microprogramming software platform for routing and switching devices, RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Serie...

Dell Smart Dock Information Disclosure

The vulnerability of the Dell Smart Dock software lies in the ability to disclose information through registration files. Exploiting this vulnerability could allow a perpetrator to…...

PowerScale OneFS NFS Export Unauthorized Access

The vulnerability of the NFS Export component of the PowerScale OneFS operating system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Mozilla Firefox Information Disclosure

The vulnerability of Mozilla Firefox browsers is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...