Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.3 CVE-2025-65961

Contao is vulnerable to cross-site scripting in templates_CVE-2025-65961

Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, it is possible to inject code into the templat...

contao contao >= 4.0.0, < 4.13.57 CVE
LOW 2.7 CVE-2025-65942

VictoriaMetrics Snappy Decoder DoS Vulnerability is Causing OOM_CVE-2025-65942

VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to bef...

VictoriaMetrics VictoriaMetrics >= 1.0.0, < 1.110.23 CVE
LOW 1 MS:CVE-2025-12888

Constant Time Issue with Xtensa-based ESP32 and X22519_MS:CVE-2025-12888

{“lastseen”:”2025-11-26T01:37:34″,”description”:””,”published”:”2025-11-25T01:01:...

N/A N/A MSCVE
LOW 2.1 MS:CVE-2025-11931

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt_MS:CVE-2025-11931

{“lastseen”:”2025-11-26T01:37:33″,”description”:””,”published”:”2025-11-25T01:02:...

N/A N/A MSCVE
LOW 2.1 MS:CVE-2025-11934

Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify_MS:CVE-2025-11934

{“lastseen”:”2025-11-26T01:37:33″,”description”:””,”published”:”2025-11-25T01:02:...

N/A N/A MSCVE
LOW 2.3 MS:CVE-2025-12889

TLS 1.2 Client Can Downgrade Digest Used_MS:CVE-2025-12889

{“lastseen”:”2025-11-26T01:37:33″,”description”:””,”published”:”2025-11-25T01:02:...

N/A N/A MSCVE
LOW 2.3 MS:CVE-2025-11933

DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension_MS:CVE-2025-11933

{“lastseen”:”2025-11-26T01:37:33″,”description”:””,”published”:”2025-11-25T01:02:...

N/A N/A MSCVE
LOW 2.3 MS:CVE-2025-11932

Timing Side-Channel in PSK Binder Verification_MS:CVE-2025-11932

{“lastseen”:”2025-11-26T01:37:33″,”description”:””,”published”:”2025-11-25T01:02:...

N/A N/A MSCVE
LOW 3.7 FF48F125-A885-

Exploit for Race Condition in Vercel Next.Js_FF48F125-A885-52D3-AF84-3932179218F6

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation CVE-2025-324...

N/A N/A GITHUBEXPLOIT
LOW 2.1 CVE-2025-62497

CVE-2025-62497_CVE-2025-62497

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while log...

Sony Corporation SNC-CX600W versions prior to Ver.2.8.0 CVE