Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 2.1 CVE-2025-58452

WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint ‘listar_despachos.php’ parameter ‘id_memorando’_CVE-2025-58452

WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the listar_despachos.php...

LabRedesCefetRJ WeGIA < 3.4.11 CVE
LOW 2.3 CVE-2025-58751

Vite middleware may serve files starting with the same name with the public directory_CVE-2025-58751

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the ...

vitejs vite < 5.4.20 CVE
LOW 2.3 CVE-2025-58752

Vite’s `server.fs` settings were not applied to HTML files_CVE-2025-58752

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served r...

vitejs vite < 5.4.20 CVE
LOW 1.7 CVE-2025-57815

Fides Lacks Brute-Force Protections on Authentication Endpoints_CVE-2025-57815

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate ...

ethyca fides < 2.69.1 CVE
LOW 1.7 CVE-2025-57766

Fides’s Admin UI User Password Change Does Not Invalidate Current Session_CVE-2025-57766

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, admin UI user password changes in Fides do not invalidate active use...

ethyca fides < 2.69.1 CVE
LOW 3.7 CVE-2025-51586

CVE-2025-51586_CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive informati...

n/a n/a n/a CVE
LOW 2.3 CVE-2025-58422

CVE-2025-58422_CVE-2025-58422

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attac...

Ricoh Company, Ltd. RICOH Streamline NX versions 3.5.1 to 24R3 CVE
LOW 2.3 CVE-2025-10080

running-elephant Datart API AESUtil.java getTokensecret hard-coded key_CVE-2025-10080

A vulnerability has been found in running-elephant Datart up to 1.0.0-rc3. Affected by this issue is the function getTokensecret of the file datart...

running-elephant Datart 1.0.0-rc1 CVE
LOW 3.3 CVE-2025-0011

CVE-2025-0011_CVE-2025-0011

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to obtain kernel address informa...

AMD AMD Ryzen™ 8000 Series Desktop Processors AMD Software: Adrenalin Edition 24.10.1 (24.20.19.01), AMD Software: PRO Edition 24.Q4 (24.20.30) CVE
LOW 3.3 CVE-2025-26419

CVE-2025-26419_CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escala...

Google Android 14 CVE