PT-2025-6261 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, and prior to 7.0.15 FortiOS versions 6.4.x Description: The issue is related to an incorrect privilege assignment in FortiOS, allowing an authenticated admin with the Security...

CVE-2025-1152 GNU Binutils ld xstrdup.c xstrdup memory leak

A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2025-1151

A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The...

CVE-2025-1151

A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The...

CVE-2025-1150 GNU Binutils ld libbfd.c bfd_malloc memory leak

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfdmalloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high...

Apache Felix Webconsole: XSS in services console

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Felix Webconsole. This issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8. Users are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issu...

CVE-2025-25247

Apache Felix Webconsole CVE-2025-25247 is a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Itffects Apache Felix Webconsole with 4.x up to 4.9.8 and 5.x up to 5.0.8. The CVSS v3.1 base score is 6.1 (Network attack vector, no privile...

PT-2025-17671

Name of the Vulnerable Software and Affected Versions fig2dev version 3.2.9a Description The issue is related to a segmentation fault in the fig2dev software, specifically in version 3.2.9a. This fault can be triggered by an attacker through local input manipulation via the genge itp spline...

Apple Security Update: macOS Ventura 13.7.4

Apple recommends to install security update macOS Ventura 13.7.4 on devices macOS Ventura...

PT-2025-6050 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.43 Description: A vulnerability was found in GNU Binutils, affecting the function bfd putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely, bu...

EulerOS 2.0 SP12 : subversion (EulerOS-SA-2025-1182)

According to the versions of the subversion packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-11973

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.5.5 Description The issue arises when a user imports a certificate with crafted subkey data lacking a valid backsig or having incorrect usage flags, leading to a loss of ability to verify signatures made from certain...

PT-2025-10603

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 9.0.0.M1 through 9.0.98 Apache Tomcat versions 10.1.0-M1 through 10.1.34 Apache Tomcat versions 11.0.0-M1 through 11.0.2 Description The issue affects Apache Tomcat due to a path equivalence vulnerability, allowing remot...

PT-2025-10637 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.88 Description: A use after free issue in the Inspector component of Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue...

PT-2025-6100

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.4.0 through 4.9.1 Description Wazuh, a platform used for threat prevention, detection, and response, is affected by an unsafe deserialization vulnerability. This flaw, potentially allowing remote code execution, arises from th...

PT-2025-6052

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A problematic issue has been found in GNU Binutils, affecting the bfd elf write section eh frame function of the ld component. This issue leads to memory corruption and can be initiated remotely, although...

PT-2025-6054 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.43 Description: A critical vulnerability was found in GNU Binutils, affecting the function bfd elf reloc symbol deleted p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is...

PT-2025-6104 · Dayrui · Xunruicms

Name of the Vulnerable Software and Affected Versions: dayrui XunRuiCMS versions up to 4.6.4 Description: A critical issue has been identified, affecting unknown code in the /Control/Api/Api.php file. The manipulation of the thumb argument leads to deserialization. This issue can be exploited...

PT-2025-6084

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm versions prior to 1.3.1 Description: A vulnerability exists in mintplex-labs/anything-llm due to improper handling of non-ASCII filenames within the multer library. This can lead to path traversal, allowing attacker...