Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.3 CVE-2025-59284

Windows NTLM Spoofing Vulnerability_CVE-2025-59284

{“lastseen”:””,”description”:””,”published”:”2025-10-14T17:00:48.588Z”,&#82...

Microsoft Windows 11 version 22H2 10.0.22621.0 CVE
LOW 3.1 CVE-2025-59280

Windows SMB Client Tampering Vulnerability_CVE-2025-59280

{“lastseen”:””,”description”:””,”published”:”2025-10-14T17:00:46.316Z”,&#82...

Microsoft Windows 10 Version 1809 10.0.17763.0 CVE
LOW 2.1 MS:CVE-2025-59294

Windows Taskbar Live Preview Information Disclosure Vulnerability_MS:CVE-2025-59294

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a p...

N/A N/A MSCVE
LOW 2.1 CVE-2025-59294

Windows Taskbar Live Preview Information Disclosure Vulnerability_CVE-2025-59294

{“lastseen”:””,”description”:””,”published”:”2025-10-14T17:00:51.334Z”,&#82...

Microsoft Windows 10 Version 1809 10.0.17763.0 CVE
LOW 2.9 CVE-2025-62366

Mailgen vulnerable to HTML injection and cross-site scripting via plaintext email generation_CVE-2025-62366

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.30 contain an HTML...

eladnava mailgen < 2.0.31 CVE
LOW 2.6 CVE-2025-31514

CVE-2025-31514_CVE-2025-31514

An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0...

Fortinet FortiProxy 7.6.0 CVE
LOW 2.5 CVE-2025-58903

CVE-2025-58903_CVE-2025-58903

An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user...

Fortinet FortiOS 7.6.0 CVE
LOW 2.5 CVE-2025-47890

CVE-2025-47890_CVE-2025-47890

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions, 7.0 all versi...

Fortinet FortiOS 7.6.0 CVE
LOW 3.8 CVE-2025-8594

Pz-LinkCard < 2.5.7 - Contributor+ SSRF_CVE-2025-8594

The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could allow users with a role as l...

Unknown Pz-LinkCard CVE
LOW 3.5 CVE-2025-40773

CVE-2025-40773_CVE-2025-40773

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulne...

Siemens SiPass integrated CVE