BELL-CVE-2025-37797

Bulletin has no description...

BELL-CVE-2023-53124

Bulletin has no description...

BELL-CVE-2023-53114

Bulletin has no description...

BELL-CVE-2023-53085

Bulletin has no description...

BELL-CVE-2023-53112

Bulletin has no description...

BELL-CVE-2023-53089

Bulletin has no description...

BELL-CVE-2023-53105

Bulletin has no description...

BELL-CVE-2023-53113

Bulletin has no description...

BELL-CVE-2023-53053

Bulletin has no description...

BELL-CVE-2023-53049

Bulletin has no description...

BELL-CVE-2023-53052

Bulletin has no description...

BELL-CVE-2023-53044

Bulletin has no description...

BELL-CVE-2023-53064

Bulletin has no description...

BELL-CVE-2023-53058

Bulletin has no description...

PT-2025-19957 · Pcvue · Pcvue

Name of the Vulnerable Software and Affected Versions: PcVue affected versions not specified Description: The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are...

CVE-2025-46553 @misskey-dev/summaly Redirect Filter Bypass

@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main summaly function causes the allowRedirects option to never be passed to any plugins, and as a result, isn't enforced. Misskey will follow redirects,...

CVE-2025-43848 GHSL-2025-018_Retrieval-based-Voice-Conversion-WebUI

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckptpath0 variable takes user input e.g. a path to a model and passes it to the changeinfo function in processckpt.py, which uses it...

CVE-2025-45240

foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...

CVE-2025-43845 GHSL-2025-015_Retrieval-based-Voice-Conversion-WebUI

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to code injection. The ckptpath2 variable takes user input e.g. a path to a model and passes it to changeinfo function, which opens and reads the file on the given path...

CVE-2025-43843 GHSL-2025-013_Retrieval-based-Voice-Conversion-WebUI

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7 and f0method8 take user input and pass it into the extractf0feature function, which concatenates them into a command th...