MAL-2025-6755 Malicious code in react-native-gainsight-px (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-53111

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...

CGA-VX37-RWM7-FPF2

Bulletin has no description...

CGA-7F4Q-7GWF-75FM

Bulletin has no description...

CGA-WRJQ-VQJQ-VVVX

Bulletin has no description...

CGA-HPQP-HV27-5W45

Bulletin has no description...

CGA-44PM-GG7C-86QH

Bulletin has no description...

CVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...

CGA-P769-WCV6-R8PM

Bulletin has no description...

CGA-87JQ-3XQ3-88MR

Bulletin has no description...

RHSA-2025:12083 Red Hat Security Advisory: icu security update

Bulletin has no description...

RHBA-2025:6314 Red Hat Bug Fix Advisory: openssl bug fix and enhancement update

Bulletin has no description...

CGA-P6F3-HJCR-55XQ

Bulletin has no description...

MINI-XXR6-P4R3-9CGP

Bulletin has no description...

BELL-CVE-2025-38376

Bulletin has no description...

BELL-CVE-2025-38426

Bulletin has no description...

CVE-2025-54126 WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

The WebAssembly Micro Runtime's WAMR iwasm package is the executable binary built with WAMR VMcore which supports WebAssembly System Interface WASI and command line interface. In versions 2.4.0 and below, iwasm uses --addr-pool with an IPv4 address that lacks a subnet mask, allowing the system to...

GO-2025-3828 Unexpected command execution in untrusted VCS repositories in cmd/go

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...

CVE-2025-53902 Tuleap exposes artifacts to a mentioned user via email notifications

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana

Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...