OSV-2025-149 UNKNOWN READ in processClientServerHello

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049414 Crash type: UNKNOWN READ Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...

CVE-2024-49344

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout...

CVE-2025-25667

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function getparentControllistInfo...

CVE-2025-25668

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub47D878 function...

CGA-6P47-PJQC-C2HG

Bulletin has no description...

CGA-R6WM-VR5C-4F5J

Bulletin has no description...

CGA-Q5R8-XVJG-G727

Bulletin has no description...

CGA-PXX2-J5VX-HPC7

Bulletin has no description...

CGA-7FCX-V6H4-77X5

Bulletin has no description...

CVE-2025-25765

MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do...

CGA-J3H7-RGJ5-WH2F

Bulletin has no description...

CGA-CXWV-G65C-MXFP

Bulletin has no description...

CVE-2025-25055

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

GHSA-5MWF-688X-MR7X vulnerabilities

Vulnerabilities for packages: logstash...

CVE-2025-25196 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CGA-C2GH-HXGQ-V5X7

Bulletin has no description...

CGA-3QP8-WHQR-P7QJ

Bulletin has no description...

CVE-2025-26773

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through = 5.5.0...

CVE-2025-0001

Abacus ERP is versions older than 2024.210.16036, 2023.205.15833, 2022.105.15542 are affected by an authenticated arbitrary file read vulnerability...

CVE-2025-1007 Improper Authorization in /user/namespace/{namespace}/details

In OpenVSX version v0.9.0 to v0.20.0, the /user/namespace/namespace/details API allows a user to edit all namespace details, even if the user is not a namespace Owner or Contributor. The details include: name, description, website, support link and social media links. The same issues existed in...