DEBIAN-CVE-2025-52565

runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting /dev/pts/$n to /dev/console inside the container, an attacker can...

CGA-RJ3R-FGMX-R7PW

Bulletin has no description...

EUVD-2025-38113

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through = 2.3.6...

EUVD-2025-38135

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in designervily Greenify greenify allows PHP Local File Inclusion.This issue affects Greenify: from n/a through = 2.2...

BELL-CVE-2025-10966

Bulletin has no description...

MINI-6P87-G8QJ-H3GP

Bulletin has no description...

MINI-982F-RX2P-GFGJ

Bulletin has no description...

MINI-G4WP-J2W3-4W8C

Bulletin has no description...

MINI-C2MM-V9XP-6RX3

Bulletin has no description...

MINI-6998-RGW4-5GQR

Bulletin has no description...

Prototype Pollution

@messageformat/runtime is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of nested message keys during message data processing, which allows an attacker to inject arbitrary properties into the Object prototype and cause denial of service or unexpected...

CGA-MVQG-R7X2-F2W5

Bulletin has no description...

CGA-F292-96M2-9HRC

Bulletin has no description...

CGA-47CW-9R67-CV6H

Bulletin has no description...

EUVD-2025-37983

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netcad Software Inc. Netigma allows XSS Through HTTP Query Strings.This issue affects Netigma: through 28102025...

MINI-P2QP-C3W4-XR34

Bulletin has no description...

MINI-P5RG-J6P2-6JJ4

Bulletin has no description...

CVE-2025-11956

Proliz OBS (Student Affairs Information System) is affected up to version 25.0401. The vulnerability is a Stored XSS caused by improper neutralization of input during web page generation, enabling injection of untrusted data that persists in the system. Affected component: OBS web page generation...

CVE-2025-10955

The CVE-2025-10955 entry affects Netcad Netigma: improper neutralization of input during web page generation (XSS) via HTTP query strings. Concrete details across connected records indicate affected versions include Netigma 6.3.5 before 6.3.5 V8 and versions up to 28102025. The root cause is impr...

CVE-2025-10955

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netcad Software Inc. Netigma allows XSS Through HTTP Query Strings. This issue affects Netigma: from 6.3.5 before 6.3.5 V8...