Siemens SIMATIC S7-1500 Improper Authentication (CVE-2023-27536)

An authentication bypass vulnerability exists libcurl 8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPTGSSAPIDELEGATION option. This vulnerability affects...

PT-2025-46664

Name of the Vulnerable Software and Affected Versions N-central versions prior to 2025.4 Description N-central versions prior to 2025.4 are susceptible to an XML External Entities injection that could lead to information disclosure. This issue allows for the potential exposure of sensitive data...

CVE-2025-13012

Race condition in the Graphics component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13024 JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13015

CVE-2025-13015 is a spoofing vulnerability in Firefox affecting Firefox < 145, Firefox ESR < 140.5, and Firefox ESR

PT-2025-46365

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Description The Graphics: WebGPU component in Firefox contains incorrect boundary conditions. This issue does not have any reported real-world exploitation or estimated number of affected devices. The issue reside...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR, which stems from a post-release reuse issue in the Audio/Video component, and can be exploited by an...

CVE-2025-11414 affecting package gdb for versions less than 11.2-10

CVE-2025-11414 affecting package gdb for versions less than 11.2-10. A patched version of the package is available...

CVE-2025-11412 affecting package gdb for versions less than 11.2-10

CVE-2025-11412 affecting package gdb for versions less than 11.2-10. A patched version of the package is available...

CVE-2025-62053 WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through 4.2.0...

CVE-2025-10873

CVE-2025-10873 : ElementInvader Addons for Elementor (WordPress) before 1.4.1 allows an unauthenticated user to send arbitrary emails to arbitrary addresses due to a missing authorization check on the elementinvader_addons_for_elementor_forms_send_form action. Affected plugin versions are prior t...

[SECURITY] Fedora 43 Update: uv-0.9.5-1.fc43

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

PT-2025-45033

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An issue exists in Salesforce Agentforce Vibes Extension related to improper neutralization of input used for LLM prompting, which can lead to code injection. The issue...

CVE-2021-47697

Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting XSS via the Views feature URL handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

CVE-2018-25119

Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting XSS via the "fusionwindow" parameter. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.8.9 that stems from insufficient validati...

CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2

CVE-2024-3727 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2025-0689 affecting package grub2 for versions less than 2.06-25

CVE-2025-0689 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-37298 affecting package podman for versions less than 5.6.1-2

CVE-2024-37298 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...