Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.1 CVE-2025-2498

Insufficient Granularity of Access Control in GitLab_CVE-2025-2498

An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under...

GitLab GitLab 12.0 CVE
LOW 2 CVE-2025-5941

Out-of-Bounds Read Vulnerability in Netskope Client_CVE-2025-5941

Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS...

Netskope Netskope Client CVE
LOW 2.7 CVE-2025-55193

Active Record logging vulnerable to ANSI escape injection_CVE-2025-55193

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar met...

rails rails >= 0, < 7.1.5.2 CVE
LOW 3.7 CVE-2025-53859

NGINX ngx_mail_smtp_module vulnerability_CVE-2025-53859

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX S...

F5 NGINX Plus R35 CVE
LOW 3.6 CE56E1F3-E102-

Exploit for CVE-2025-55188_CE56E1F3-E102-50A6-B754-53DCF4CE524C

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC (CVE-2025-55188) Description This proof-of-concept demonstrates CVE-2025-55188, a...

N/A N/A GITHUBEXPLOIT
LOW 3.6 C3FDE2A8-F0D2-

Exploit for CVE-2025-55188_C3FDE2A8-F0D2-5B9E-B275-4A0FCE40B606

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC (CVE-2025-55188) Description This proof-of-concept demonstrates CVE-2025-55188, a ...

N/A N/A GITHUBEXPLOIT
LOW 2.4 CVE-2025-40570

CVE-2025-40570_CVE-2025-40570

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V10.0), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V10.0), S...

Siemens SIPROTEC 5 6MD84 (CP300) CVE
LOW 3.5 CVE-2025-42941

Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)_CVE-2025-42941

SAP Fiori (Launchpad) is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link () elements....

SAP_SE SAP Fiori (Launchpad) SAP_UI 754 CVE
LOW 3.5 CVE-2025-42955

Missing authorization check in SAP Cloud Connector_CVE-2025-42955

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to...

SAP_SE SAP Cloud Connector SAP_CLOUD_CONNECTOR 2.0 CVE
LOW 3.7 CVE-2025-49221

Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin_CVE-2025-49221

Mattermost Confluence Plugin version

Mattermost Mattermost Confluence Plugin CVE