CVE-2025-24838

Improper privilege management for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege...

EUVD-2025-92745

Malicious code in citra-saguer32-miaww npm...

EUVD-2025-74162

Malicious code in territorialhalibutindigo-40 npm...

EUVD-2025-76570

Malicious code in indirectcapybara-apptea npm...

EUVD-2025-78815

Malicious code in medicalraccoonz3n npm...

EUVD-2025-79940

Malicious code in youngestreindeer0xrequest npm...

EUVD-2025-82364

Malicious code in conway-soluble-pot npm...

DEBIAN-CVE-2025-12447

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

EUVD-2025-49638

Malicious code in plasticflyz3n npm...

EUVD-2025-48813

Malicious code in alonesnakez3n npm...

NVIDIA Triton Inference Server DoS

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure...

EUVD-2025-37943

Dell Command Monitor DCM, versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CGA-7W94-X9XC-39G8

Bulletin has no description...

EUVD-2025-37062

Malicious code in mms-thin-client npm...

GO-2025-4030 Mattermost has an Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost has an Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...

DEBIAN-CVE-2025-40091

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlinkfree in ixgberemove Since ixgbeadapter is embedded in devlink, calling devlinkfree prematurely in the ixgberemove path can lead to UAF. Move devlinkfree to the end. KASAN report: BUG: KASAN:...

CVE-2025-60595

SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution...

BELL-CVE-2025-40062

Bulletin has no description...

BELL-CVE-2025-40040

Bulletin has no description...

PT-2025-44296

Name of the Vulnerable Software and Affected Versions Jenkins Curseforge Publisher Plugin version 1.0 Description The Jenkins Curseforge Publisher Plugin version 1.0 does not mask API Keys displayed on the job configuration form. This increases the potential for attackers to observe and capture...