12576 matches found
PT-2025-29596
Name of the Vulnerable Software and Affected Versions Oracle Mobile Field Service versions 12.2.3 through 12.2.13 Description An easily exploitable issue exists in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Multiplatform Sync Errors. A low-privileged attacker wi...
PT-2025-29577 · NetGear · Netgear Xr300
Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.38 10.3.30 Description: A stack-based buffer overflow exists in the HTTPD service through the usb device.cgi endpoint. The issue occurs when processing POST requests containing the read access parameter...
PT-2025-29608 · Oracle · Oracle Siebel Crm
Name of the Vulnerable Software and Affected Versions: Oracle Siebel CRM versions 25.0 through 25.5 Description: An easily exploitable issue exists in the User Interface component of Oracle Siebel CRM, allowing an unauthenticated attacker with network access via HTTP to gain unauthorized read...
Security Bulletin: NVIDIA DOCA-Host and Mellanox OFED - July 2025
NVIDIA has released a software update for NVIDIA® DOCA Host and Mellanox OFED. To protect your system, download and install the latest update from the DOCA Framework page. For earlier evaluation versions, contact your account manager to get access through NVOnline. Go to NVIDIA Product Security...
PT-2025-29672 · Cyberark · Conjur Oss +1
Name of the Vulnerable Software and Affected Versions: Conjur Secrets Manager, Self-Hosted versions prior to 13.5.1 and 13.6.1 Conjur OSS versions prior to 1.22.1 Description: Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to...
Security Bulletin: NVIDIA Container Toolkit - July 2025
NVIDIA has released a software update for NVIDIA® Container Toolkit and GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product Security...
openSUSE Security Advisory (SUSE-SU-2025:02296-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-30062 · Tenda · Tenda Fh451
Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in the formWebTypeLibrary function within the /goform/webtypelibrary file. Manipulation of the webSiteId argument can lead to a stack-based buffer overflow, allowing for remote...
PT-2025-29563 · Nexxt Solutions · Ncm-X1800 Mesh Router
Name of the Vulnerable Software and Affected Versions: Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below Description: A command injection issue exists in the web management interface's ping and traceroute functionality of the Nexxt Solutions NCM-X1800 Mesh Router. The application...
PT-2025-29622 · Oracle · Oracle Application Express
Name of the Vulnerable Software and Affected Versions: Oracle Application Express versions 24.2.4 through 24.2.5 Description: An easily exploitable issue exists in the Strategic Planner Starter App component of Oracle Application Express. A low-privileged attacker with network access via HTTP can...
Slackware Linux 15.0 / current libxml2 Multiple Vulnerabilities (SSA:2025-196-01)
The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.14.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-196-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted t...
CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...
CVE-2025-53834 Caido Toast Vulnerable to Reflected Cross-site Scripting
Caido is a web security auditing toolkit. A reflected cross-site scripting XSS vulnerability was discovered in Caido’s toast UI component in versions prior to 0.49.0. Toast messages may reflect unsanitized user input in certain tools such as Match&Replace and Scope. This could allow an attacker t...
RHSA-2025:10837 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:10829 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
CVE-2025-53689 Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons
Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 Java 8, 2.22.1 Java 11 or 2.23.2 Java 11, beta versions, which fix this issue...
CVE-2025-53689 Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons
Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 Java 8, 2.22.1 Java 11 or 2.23.2 Java 11, beta versions, which fix this issue...
PT-2025-29399 · Unknown · Sapido Rb-1802
Name of the Vulnerable Software and Affected Versions: Sapido RB-1802 version 1.0.32 Description: A cross-site scripting issue exists in the URL Filtering Page component, specifically within the urlfilter.asp file. The manipulation of the URL address argument can lead to exploitation. The exploit...
PT-2025-29504
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 ImageMagick versions prior to 6.9.13-26 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. A heap buffer overflow exists in the...