7-Zip Multiple Vulnerabilities (Jul 2025) - Windows

7zip is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip"; ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1830)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2025-1837)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30284 · Commscope · Ruckus Unleashed

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 CommScope Ruckus Unleashed versions prior to 200.17.7.0.139 Description: The authenticated diagnostics API endpoint /admin/ cmdstat.jsp passes attacker-controlled input to the shell...

PT-2025-30279 · Commscope · Ruckus Zonedirector +1

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 and 200.17.7.0.139 CommScope Ruckus ZoneDirector versions prior to 10.5.1.0.279 Description: A hidden debug script .ap debug.sh invoked from the restricted command-line interface do...

Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2025-1817)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-1819)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2025-1840)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30276 · Pavo Pay · Pavo Pay

Name of the Vulnerable Software and Affected Versions: PAVO Pay versions prior to 13.05.2025 Description: A use of hard-coded credentials issue exists in PAVO Pay, allowing the reading of sensitive constants within an executable. Recommendations: Update PAVO Pay to version 13.05.2025 or later...

PT-2025-30278 · Commscope · Ruckus Zonedirector +1

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 and 200.17.7.0.139 CommScope Ruckus ZoneDirector versions prior to 10.5.1.0.279 Description: An authenticated attacker can disable the passphrase requirement for a hidden CLI comman...

PT-2025-30312 · Drupal · Drupal File Download

Name of the Vulnerable Software and Affected Versions: Drupal File Download versions 0.0.0 through 1.8.9 Drupal File Download versions 2.0.0 through 2.0.0 Description: The File Download module is susceptible to a missing authorization issue, allowing for forceful browsing. Recommendations: Update...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-1821)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1831)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-30208 · Yangzongzhuan · Ruoyi

Name of the Vulnerable Software and Affected Versions: yangzongzhuan RuoYi versions up to 4.8.1 Description: A problematic issue exists in yangzongzhuan RuoYi, specifically within the Image Source Handler component. This issue involves improper restriction of rendered UI layers and can be exploit...

PT-2025-30163

Name of the Vulnerable Software and Affected Versions Thor versions prior to 1.4.0 Description Thor versions prior to 1.4.0 can construct an unsafe shell command from library input. Recommendations Update Thor to version 1.4.0 or later...

PT-2025-30196 · Unknown · Foresight News App

Name of the Vulnerable Software and Affected Versions: Foresight News App versions up to 2.6.4 Description: A problematic issue exists in the Foresight News App related to the improper export of Android application components. The issue affects unknown code within the AndroidManifest.xml file of...

PT-2025-30115 · WordPress +1 · Integration For Google Sheets/Contact Form 7 +1

Name of the Vulnerable Software and Affected Versions: Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress versions up to and including 1.1.1 Description: The plugin is susceptible to PHP Object Injection due to deserialization of untrusted input...

PT-2025-30110 · WordPress · Live Stream Badger

Name of the Vulnerable Software and Affected Versions: Live Stream Badger plugin for WordPress versions up to and including 1.4.3 Description: The Live Stream Badger plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s livestream shortcode. Insufficient input...

PT-2025-30151 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in the fromVirtualSer function within the /goform/VirtualSer file. Manipulation of the page argument can trigger a stack-based buffer overflow, allowing for remote exploitation...

DEBIAN-CVE-2025-53901

Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set of import functions can lead to a WebAssembly guest inducing a panic in the host embedder. The specific bug is triggered by calling pathopen after calling...