CVE-2025-3500: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in Avast Antivirus 25.1.981.6 on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3...

CVE-2025-63522: Improper Restriction of Rendered UI Layers or Frames

Reverse Tabnabbing vulnerability in FeehiCMS 2.1.1 in the Comments Management function...

CVE-2025-11772: Uncontrolled Search Path Element

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-63365: Improper Limitation of a Pathname to a Restricted Directory

SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the EPUB file processing component, specifically in the functionality responsible for extracting and handling EPUB archive contents...

Photon OS 5.0: Linux PHSA-2025-5.0-0694

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0694. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mysql PHSA-2025-5.0-0693

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0693. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CyberSecurityProject

CyberSecurityProject This project...

CVE-2025-66432: Unprotected Alternate Channel

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...

CVE-2025-66420: Improper Neutralization of Input During Web Page Generation

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

CVE-2025-66219: Improper Neutralization of Special Elements used in a Command

willitmerge is a command line tool to check if pull requests are mergeable. In versions 0.2.1 and prior, there is a command Injection vulnerability in willitmerge. The vulnerability manifests in this package due to the use of insecure child process execution API exec to which it concatenates user...

CVE-2025-58303: Concurrent Execution using Shared Resource with Improper Synchronization

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-13771: Relative Path Traversal

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

CVE-2025-51736: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2025-12143: Stack-based Buffer Overflow

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...

CVE-2025-51734: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2025-51733: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...

CVE-2025-66386: Relative Path Traversal

app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin...

CVE-2025-64313: Concurrent Execution using Shared Resource with Improper Synchronization

Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58316: Concurrent Execution using Shared Resource with Improper Synchronization

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-58314: Out-of-bounds Read

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...