Filter
AND

IBM Cognos AnalyticsArbitrary Code Injection

First published (updated )

Oracle PeopleSoft Enterprise PeopleToolsSM2 Decryption Buffer Overflow

First published (updated )

handlebars.jsVersions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code E…

First published (updated )

composer/composer/composerCommand injection in composer on Windows

First published (updated )

redhat/phpUnderflow in PHP-FPM can lead to RCE

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

IBM Data Risk ManagerSQL Injection

First published (updated )

oracle communications network charging and controlSQL Injection, Use After Free

First published (updated )

Apple iOS and macOSPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

First published (updated )

PHPOOB read in php_strip_tags_ex

First published (updated )

PHPglobal buffer-overflow in mbfl_filt_conv_big5_wchar

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHPheap-buffer-overflow in phar_extract_file

First published (updated )

redhat/httpdmod_proxy SSRF

First published (updated )

composer/composer/composerMissing input validation can lead to command execution in composer

8.8
First published (updated )

Ubuntumb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full

8.8
First published (updated )

Tenable Tenable.scTenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability …

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Tenable NessusAs part of our Security Development Lifecycle, a potential privilege escalation issue was identified…

8.8
First published (updated )

Apple iOS and macOSPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

8.2
First published (updated )

Tenable Tenable.scTenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerabilit…

8.1
First published (updated )

redhat/rh-sso7-keycloakPath Traversal in Moment.js

7.5
First published (updated )

DebianNULL pointer dereference in httpd core

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/jbcs-httpd24-httpdRequest splitting via HTTP/2 method injection and mod_proxy

7.5
First published (updated )

PHPOOB Read in urldecode()

7.5
First published (updated )

UbuntuSQL Injection

7.5
First published (updated )

Tenable Tenable.scIn certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the …

7.5
First published (updated )

Node.jsNULL pointer deref in signature_algorithms processing

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Tenable Nessus Network MonitorNull pointer deref in X509_issuer_and_serial_hash()

7.5
First published (updated )

Trellix ePolicy OrchestratorRead buffer overruns processing ASN.1 strings

7.4
First published (updated )

oracle primavera gatewayXSS in `*Text` options of the Datepicker widget

7.2
First published (updated )

Oracle Primavera UnifierXSS in the `of` option of the `.position()` util

7.2
First published (updated )

Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203