PT-2025-21019 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.8, 23.0.11 and earlier Description: The issue is an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2025-21002

Name of the Vulnerable Software and Affected Versions Microsoft Windows DWM Core Library affected versions not specified Description The issue is related to a use-after-free vulnerability in the Windows Desktop Window Manager DWM Core Library. This vulnerability allows an authorized attacker to...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2025-1514)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ALSA-2025:7417 Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: dds buffe...

PT-2025-20988 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions prior to the May 2025 updates Description: The issue is related to a use after free vulnerability in Microsoft Office, allowing an unauthorized attacker to execute code locally. This vulnerability can be exploited by...

IBM DB2 DoS (7232336) (Unix)

According to its self-reported version number, IBM Db2 on Unix may be affected by a vulnerability: - IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query. CVE-2024-52903...

dirmngr-2.5.6-1.1 on GA media (moderate)

dirmngr-2.5.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15076-1 Rating: moderate Cross-References: CVE-2025-30258 CVSS scores: CVE-2025-30258 SUSE : 2.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L CVE-2025-30258 SUSE : 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

CVE-2025-31227

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...

CVE-2025-30442

The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to gain elevated privileges...

CVE-2025-31233

The issue was addressed with improved input sanitization. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2025-31218

The macOS Sequoia 15.5 operating system is affected by a vulnerability where an application may be able to observe the hostnames of new network connections. The issue was addressed by removing the vulnerable code . To mitigate this risk, users should update to macOS Sequoia 15.5 .

CVE-2025-24144

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.7, macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to leak sensitive kernel state...

OZI-Project/ozi-publish Code Injection vulnerability

Impact Potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects arbitrary code. Patches This is patched in 1.13.6 Workarounds Downgrade to 1.13.2 References Understanding the Risk of Script Injections...

GHSA-2487-9F55-2VG9 OZI-Project/ozi-publish Code Injection vulnerability

Impact Potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects arbitrary code. Patches This is patched in 1.13.6 Workarounds Downgrade to 1.13.2 References Understanding the Risk of Script Injections...

CVE-2025-47270

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

CVE-2025-46729

julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...

CVE-2025-46729 phpDVDProfiler Cross-site Scripting vulnerability

julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...

CVE-2025-46729 phpDVDProfiler Cross-site Scripting vulnerability

julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...

PT-2025-20691 · Invelos +1 · Dvdprofiler +1

Name of the Vulnerable Software and Affected Versions: julmud/phpDVDProfiler versions v 20230807 through v 20250510 Description: The issue concerns cross-site scripting in the search function of the software. This allows for potential malicious script execution when a user interacts with the sear...

openSUSE Security Advisory (SUSE-SU-2025:1506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...