CVE-2024-48830

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Comman...

CVE-2024-48830

Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Comman...

CVE-2025-29788 Sylius PayPal Plugin Payment Amount Manipulation Vulnerability

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Security update for restic (moderate)

openSUSE Security Update: Security update for restic Announcement ID: openSUSE-SU-2025:0091-1 Rating: moderate References: 1239264 Cross-References: CVE-2025-22868 CVSS scores: CVE-2025-22868 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

K000150394: Intel QuickAssist Technology vulnerabilities CVE-2024-29223, CVE-2023-32277, CVE-2024-31153, and CVE-2024-31858

Security Advisory Description CVE-2024-29223 Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-32277 Untrusted Pointer Dereference in I/O subsystem...

CVE-2025-26706

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07...

CVE-2025-26707

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05...

CVE-2025-0652 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only...

CVE-2025-25291 ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

ruby-saml provides security assertion markup language SAML single sign-on SSO for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely...

CVE-2025-25293 ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

ruby-saml provides security assertion markup language SAML single sign-on SSO for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service DoS with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is...

CVE-2025-27925

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...

IBM Sterling File Gateway Information Leakage Vulnerability (CNVD-2025-06655)

IBM Sterling File Gateway is a suite of file transfer software from International Business Machines IBM. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An information leakage vulnerability exists in IBM...

CVE-2025-28940

CVE-2025-28940 refers to a CSRF vulnerability in the WordPress plugin Back To Top (

CVE-2025-28922

CVE-2025-28922 describes a CSRF to Stored XSS vulnerability in the WordPress Go To Top plugin (affected: versions up to 0.0.8). The issue arises from CSRF handling that enables stored cross-site scripting when a victim visits a crafted page or executes a forged request. Connected sources confirm ...

CVE-2025-28862

CVE-2025-28862 is a CSRF vulnerability in the WordPress plugin “Comment Date and Gravatar remover” affecting versions from n/a through 1.0. The description specifies a cross-site request forgery issue in this plugin; connected sources corroborate the affected software and context. The documents d...

CVE-2025-28859

CVE-2025-28859 is a CSRF vulnerability in the WordPress Maintenance Notice plugin (≤ 1.0.5). Exploitation could allow unauthorized actions on behalf of an authenticated user. Redhat/NVD entries and Patchstack indicate the fix was released in version 1.0.6; upgrading to 1.0.6 or later is the recom...

CVE-2025-27924

Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...

BIT-DJANGO-2024-39614

An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. getsupportedlanguagevariant was subject to a potential denial-of-service attack when used with very long strings containing specific characters...

PT-2025-15967 · Gerbera · Gerbera

Name of the Vulnerable Software and Affected Versions: gerbera versions prior to 2.5.0-1.1 Description: A vulnerability in the gerbera package on openSUSE Tumbleweed allows the service user gerbera to escalate to root. Recommendations: For versions prior to 2.5.0-1.1, update to version 2.5.0-1.1 ...