Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 1.9 CVE-2025-13425

Denial of Service in OSV-SCALIBR_CVE-2025-13425

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for ...

Google OSV-SCALIBR < 0.3.4 CVE
LOW 3.3 CVE-2025-64524

CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution_CVE-2025-64524

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos...

OpenPrinting cups-filters <= 2.0.1 CVE
LOW 3.5 CVE-2025-35029

Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page_CVE-2025-35029

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbi...

Medical Informatics Engineering Enterprise Health RC202503 CVE
LOW 3.5 CVE-2025-64757

Astro Development Server is Vulnerable to Arbitrary Local File Read_CVE-2025-64757

Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development server that allows arbi...

withastro astro < 5.14.3 CVE
LOW 2.3 CVE-2025-11884

Cross-site Scripting vulnerability discovered in OpenText™ Universal Discovery and CMDB_CVE-2025-11884

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The ...

OpenText™ uCMDB 24.4 CVE
LOW 3.5 CVE-2025-63292

CVE-2025-63292_CVE-2025-63292

Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmwar...

n/a n/a n/a CVE
LOW 3 CVE-2025-55074

Channel member objects leak read status_CVE-2025-55074

Mattermost versions 10.11.x

Mattermost Mattermost 10.11.0 CVE
LOW 3.8 CVE-2025-61713

CVE-2025-61713_CVE-2025-61713

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 ...

Fortinet FortiPAM 1.6.0 CVE
LOW 3.9 CVE-2025-54972

CVE-2025-54972_CVE-2025-54972

An improper neutralization of crlf sequences ('crlf injection') in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail...

Fortinet FortiMail 7.6.0 CVE
LOW 3.9 CVE-2025-54971

CVE-2025-54971_CVE-2025-54971

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all...

Fortinet FortiADC 7.4.0 CVE