Latest CVE Feed
-
5.9
MEDIUMCVE-2025-49133
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of... Read more
Affected Products : libtpms- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Memory Corruption
-
8.2
HIGHCVE-2025-3052
An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stor... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Misconfiguration
-
9.4
CRITICALCVE-2025-36852
A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud Storage, or similar object storage) that allows any contributor with pull request... Read more
Affected Products : nx-remotecache-azure nx-remotecache-custom azure-cache gcs-cache s3-cache shared-fs-cache nx-remotecache-minio- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Supply Chain
-
6.1
MEDIUMCVE-2024-41505
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section via the field "Profisso" (professor).... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Cross-Site Scripting
-
6.1
MEDIUMCVE-2024-41504
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportunities) section of the application when creating or editing an "Atividade" (activity), the form field "Descrico" allows injection of Java... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Cross-Site Scripting
-
6.1
MEDIUMCVE-2024-41503
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) inside the filter Save option in the "Busca" (search) function.... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Cross-Site Scripting
-
6.1
MEDIUMCVE-2024-41502
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (observances) in the "Pessoas" (persons) section when creating or editing either a legal or a natural person.... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025
- Vuln Type: Cross-Site Scripting
-
5.4
MEDIUMCVE-2025-5973
A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-table.php. The manipulation of the argument tableno leads to cross sit... Read more
Affected Products : restaurant_table_booking_system- Published: Jun. 10, 2025
- Modified: Jun. 17, 2025
- Vuln Type: Cross-Site Scripting
-
5.4
MEDIUMCVE-2025-5972
A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. I... Read more
Affected Products : restaurant_table_booking_system- Published: Jun. 10, 2025
- Modified: Jun. 17, 2025
- Vuln Type: Cross-Site Scripting
-
5.5
MEDIUMCVE-2025-47112
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as... Read more
- Published: Jun. 10, 2025
- Modified: Jul. 25, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-47111
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, ... Read more
- Published: Jun. 10, 2025
- Modified: Jul. 25, 2025
- Vuln Type: Denial of Service
-
7.8
HIGHCVE-2025-47107
InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus... Read more
- Published: Jun. 10, 2025
- Modified: Jul. 15, 2025
- Vuln Type: Memory Corruption
-
5.5
MEDIUMCVE-2025-43579
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-43578
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Information Disclosure
-
7.8
HIGHCVE-2025-43577
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43576
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43575
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user in... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43574
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43573
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-43550
Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interact... Read more
- Published: Jun. 10, 2025
- Modified: Jun. 27, 2025
- Vuln Type: Memory Corruption