Recent Advisories

Severity ID Title Vendor Product Date Type
Unknown ADV-8854

hiWeb Export Posts <= 0.9.0.0 - Cross-Site Request Forgery to Arbitrary File Deletion

CVE Details Basic Information Title hiWeb Export Posts

N/A N/A NEWS
Unknown ADV-8840

Dataverse Integration 2.77 – 2.81 – Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route

CVE Details Basic Information Title Dataverse Integration 2.77 – 2.81 – Missing Authorization to Authenticated (Subscriber+) Privilege ...

N/A N/A NEWS
Unknown ADV-8834

SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

CVE Details Basic Information Title SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability...

N/A N/A NEWS
Unknown ADV-8826

CVE-2025-47187

CVE Details Basic Information Title CVE-2025-47187 Type cve Published 2025-07-23T19:15:33 Last Seen 2025-07-24T06:59:23 Modified 2025-07-23T20:15:2...

N/A N/A NEWS
Unknown ADV-8822

LibHTP’s memory leak with lzma can lead to resource starvation

CVE Details Basic Information Title LibHTP’s memory leak with lzma can lead to resource starvation Type cve Published 2025-07-23T20:35:30.824...

N/A N/A NEWS
Unknown ADV-8821

authentik has an insufficient check for account active status during OAuth/SAML authentication

CVE Details Basic Information Title authentik has an insufficient check for account active status during OAuth/SAML authentication Type cve Publish...

N/A N/A NEWS
Unknown ADV-8820

Roo Code Lacks Line Break Validation in its Command Execution Tool

CVE Details Basic Information Title Roo Code Lacks Line Break Validation in its Command Execution Tool Type cve Published 2025-07-23T20:36:01.878Z ...

N/A N/A NEWS
Unknown ADV-8819

fastapi-guard patch contains bypassable RegEx

CVE Details Basic Information Title fastapi-guard patch contains bypassable RegEx Type cve Published 2025-07-23T22:11:36.441Z Modified 2025-07-23T2...

N/A N/A NEWS
Unknown ADV-8803

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in GitLab

CVE Details Basic Information Title Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in GitLab Type...

N/A N/A NEWS
Unknown ADV-8802

Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts

CVE Details Basic Information Title Out of Bounds Read Vulnerability in NI LabVIEW when loading fonts Type cve Published 2025-07-23T15:49:06.836Z M...

N/A N/A NEWS