PT-2025-14450 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome on Android versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Intents, allowing a remote attacker to perform privilege escalation via a crafted HTML page. Recommendations: For...

PT-2025-14109

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue concerns memory safety bugs that were present in certain versions of Firefox and Thunderbird. Some of these bugs showed evidence of memory corruption, and it...

PT-2025-14174 · Unknown · Smackcoders Aio Performance Profiler

Name of the Vulnerable Software and Affected Versions: smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug versions 1.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into log files...

PT-2025-16446

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.1.6 Description The issue allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized...

PT-2025-14104

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Firefox ESR versions prior to 128.9 Thunderbird versions prior to 137 Thunderbird ESR versions prior to 128.9 Description A crafted URL containing specific Unicode characters could hide the true origin of the page...

Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-910)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-910 advisory. Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in...

Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2025-016 (ALASTOMCAT9-2025-016)

The version of tomcat installed on the remote host is prior to 9.0.102-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT9-2025-016 advisory. Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or...

PT-2025-14455 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Autofill, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

PT-2025-14065 · Joomsky · Joomsky Js Help Desk

Name of the Vulnerable Software and Affected Versions: JoomSky JS Help Desk versions 2.9.2 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusio...

Debian dla-4105 : tzdata - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4105 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4105-1 [email protected] https://www.debian.org/lts/security/...

EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1315)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

CVE-2025-3017

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/taregtest/tatestfunc/testminmax.c of the component taregtest. The manipulation leads to out-of-bounds write. It is possible to launch the...

CVE-2025-3016

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument...

CVE-2025-3015 Open Asset Import Library Assimp ASE File ASELoader.cpp BuildUniqueRepresentation out-of-bounds

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE File Handler. The manipulation of the argument mIndices leads ...

CVE-2025-3015

CVE-2025-3015 affects Open Asset Import Library Assimp v5.4.3, specifically the ASE File Handler: ASELoader.cpp, function Assimp::ASEImporter::BuildUniqueRepresentation. The issue arises from manipulation of the argument mIndices, leading to an out-of-bounds read. The vulnerability is described a...

[SECURITY] [DLA 4100-1] libdata-entropy-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4100-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

CVE-2025-3019 Cross-site scripting vulnerabilities in KNIME Business Hub web pages

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existin...

PT-2025-13969 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 Description: The issue was addressed with improved input sanitization. Processing a maliciously crafted file may lead to a cross-site scripting attack. Recommendations: For iOS versions...

PT-2025-13853 · Drupal · Drupal General Data Protection Regulation

Name of the Vulnerable Software and Affected Versions: Drupal General Data Protection Regulation versions 0.0.0 through 3.0.1, versions 3.1.0 through 3.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This is a type of...

PT-2025-13987 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. An app may be able to read files outside of its sandbox. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to...