Filter
AND

redhat/phpUnderflow in PHP-FPM can lead to RCE

First published (updated )

handlebars.jsVersions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code E…

First published (updated )

redhat/httpdmod_proxy SSRF

First published (updated )

DebianNULL pointer dereference in httpd core

7.5
First published (updated )

Trellix ePolicy OrchestratorRead buffer overruns processing ASN.1 strings

7.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/jbcs-httpd24-httpdRequest splitting via HTTP/2 method injection and mod_proxy

7.5
First published (updated )

Tenable Nessus Network MonitorNull pointer deref in X509_issuer_and_serial_hash()

7.5
First published (updated )

F5 Access Policy ManagerXSS

First published (updated )

redhat/rh-sso7-keycloakPath Traversal in Moment.js

7.5
First published (updated )

Apple iOS and macOSPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apple iOS and macOSPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

8.2
First published (updated )

oracle primavera gatewayXSS in `*Text` options of the Datepicker widget

7.2
First published (updated )

Oracle Primavera UnifierXSS in the `of` option of the `.position()` util

7.2
First published (updated )

Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget

7.2
First published (updated )

composer/composer/composerCommand injection in composer on Windows

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle PeopleSoft Enterprise PeopleToolsSM2 Decryption Buffer Overflow

First published (updated )

PHPSpecial characters break path parsing in XML functions

First published (updated )

UbuntuPHP parses encoded cookie names so malicious `__Host-` cookies can be sent

First published (updated )

UbuntuUse-of-uninitialized-value in exif

First published (updated )

UbuntuWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPget_headers() silently truncates after a null byte

First published (updated )

Ubuntumb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

8.8
First published (updated )

PHPOOB read in php_strip_tags_ex

First published (updated )

PHPglobal buffer-overflow in mbfl_filt_conv_big5_wchar

First published (updated )

PHPFiles added to tar with Phar::buildFromIterator have all-access permissions

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

UbuntuSQL Injection

7.5
First published (updated )

IBM Data Risk ManagerSQL Injection

First published (updated )

Node.jsNULL pointer deref in signature_algorithms processing

7.5
First published (updated )

PHPOOB Read in urldecode()

7.5
First published (updated )

PHPheap-buffer-overflow in phar_extract_file

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203