8571 matches found
Unauthorized Disclosure Of Sensitive Data
github.com/rancher/fleet is vulnerable to Unauthorized Disclosure of Sensitive Data. The vulnerability is due to improper access control on BundleDeployment resources with GET or LIST permissions, which allows an attacker to retrieve Helm values containing credentials or other secrets...
Linux Distros Unpatched Vulnerability : CVE-2025-46152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the other argument. CVE-2025-46152 Note that Nessus...
389 Directory Server DoS
The vulnerability of the 389 Directory Server catalog service server is related to incorrect handling of missing values. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2025-10498
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...
CVE-2025-10498
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...
CVE-2025-10498 Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated...
CVE-2025-10498
CVE-2025-10498 affects Ninja Forms for WordPress (
PT-2025-39705
Name of the Vulnerable Software and Affected Versions Ninja Forms – The Contact Form Builder That Grows With You versions prior to 3.12.1 Description The software is susceptible to Cross-Site Request Forgery CSRF due to inadequate nonce validation when exporting CSV files. This allows...
Cisco IOS XE Code Execution
The vulnerability of Cisco IOS XE operating systems is related to the improper handling of indeterminate values. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Improper Handling of Undefined Values
Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Improper Handling of Undefined Values in the torch.cummin component when compiling a model with Inductor. An attacker can cause the application to cra...
CVE-2025-47328
Transient DOS while processing power control requests with invalid antenna or stream values...
CVE-2025-47328 Buffer Over-read in WLAN HAL
Transient DOS while processing power control requests with invalid antenna or stream values...
CVE-2025-47328
CVE-2025-47328 describes a transient Denial of Service in Qualcomm WLAN HAL caused by processing power control requests with invalid antenna or stream values. The issue affects Qualcomm closed‑source WLAN components and is associated with a high 7.5 CVSSv3.1 base score (Network attack, low comple...
Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to form-data-4.0.3.tgz CVE-2025-7783
Summary IBM Maximo Application Suite - Monitor Component is vulnerable to form-data-4.0.3.tgz CVE-2025-7783. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in...
PT-2025-39284
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A temporary denial-of-service condition can occur when processing power control requests that contain invalid antenna or stream values. Recommendations At the moment, there is no information about a...
CPython Interpreter Use-After-Free
The vulnerability of the CPython interpreter relates to incorrect validation of input data. Exploiting this vulnerability allows a remote attacker to execute an attack by replacing certain values...
Security Bulletin: IBM Watsonx BI is affected by use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).
Summary Watsonx BI use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files lib/formdata.Js. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerability in...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2025.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF006, 24.0.1-IF004 and 25.0.0-IF001. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random...
JetBrains TeamCity Information Disclosure
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to improper validation of the data entered by users against a list of allowed values. Exploiting this vulnerability can allow an attacker to disclose protected...
