CVE News Feed

• CVE-2025-13601 - Glib: integer overflow in in g_escape_uri_string()

  CVE ID :CVE-2025-13601
  Published : Nov. 26, 2025, 2:44 p.m. | 17 minutes ago
  Description :A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
  Severity: 7.7 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-9191 - Houzez (Subscriber+) PHP Object Injection via Saved Search

  CVE ID :CVE-2025-9191
  Published : Nov. 26, 2025, 1:16 p.m. | 1 hour, 46 minutes ago
  Description :The Houzez theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.6 via deserialization of untrusted input in saved-search-item.php. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
  Severity: 6.3 | MEDIUM
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-9163 - Houzez ed Stored Cross-Site Scripting via SVG File Upload

  CVE ID :CVE-2025-9163
  Published : Nov. 26, 2025, 1:16 p.m. | 1 hour, 46 minutes ago
  Description :The Houzez theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping in the houzez_property_img_upload() and houzez_property_attachment_upload() functions. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
  Severity: 6.1 | MEDIUM
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-13674 - Access of Uninitialized Pointer in Wireshark

  CVE ID :CVE-2025-13674
  Published : Nov. 26, 2025, 12:15 p.m. | 2 hours, 46 minutes ago
  Description :BPv7 dissector crash in Wireshark 4.6.0 allows denial of service
  Severity: 5.5 | MEDIUM
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-62728 - Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs

  CVE ID :CVE-2025-62728
  Published : Nov. 26, 2025, 9:15 a.m. | 5 hours, 46 minutes ago
  Description :SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is accessible to only a handful of applications (e.g., Hiveserver2) thus the vulnerability is not exploitable. Moreover, the vulnerable code cannot be reached when metastore.try.direct.sql property is set to false. This issue affects Apache Hive: from 4.1.0 before 4.2.0. Users are recommended to upgrade to version 4.2.0, which fixes the issue. Users who cannot upgrade directly are encouraged to set metastore.try.direct.sql property to false if the HMS Thrift APIs are exposed to general public.
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-59390 - Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.

  CVE ID :CVE-2025-59390
  Published : Nov. 26, 2025, 9:15 a.m. | 5 hours, 46 minutes ago
  Description :Apache Druid’s Kerberos authenticator uses a weak fallback secret when the `druid.auth.authenticator.kerberos.cookieSignatureSecret` configuration is not explicitly set. In this case, the secret is generated using `ThreadLocalRandom`, which is not a crypto-graphically secure random number generator. This may allow an attacker to predict or brute force the secret used to sign authentication cookies, potentially enabling token forgery or authentication bypass. Additionally, each process generates its own fallback secret, resulting in inconsistent secrets across nodes. This causes authentication failures in distributed or multi-broker deployments, effectively leading to a incorrectly configured clusters. Users are advised to configure a strong `druid.auth.authenticator.kerberos.cookieSignatureSecret` This issue affects Apache Druid: through 34.0.0. Users are recommended to upgrade to version 35.0.0, which fixes the issue making it mandatory to set `druid.auth.authenticator.kerberos.cookieSignatureSecret` when using the Kerberos authenticator. Services will fail to come up if the secret is not set.
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-13735 - Out-of-bounds Read in nr flc

  CVE ID :CVE-2025-13735
  Published : Nov. 26, 2025, 7:16 a.m. | 7 hours, 46 minutes ago
  Description :Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.
  Severity: 7.4 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-9558 - Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

  CVE ID :CVE-2025-9558
  Published : Nov. 26, 2025, 6:15 a.m. | 8 hours, 46 minutes ago
  Description :There is a potential OOB Write vulnerability in the gen_prov_start function in pb_adv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size.
  Severity: 7.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-9557 - Bluetooth: Mesh: Out-of-Bound Write in gen_prov_cont

  CVE ID :CVE-2025-9557
  Published : Nov. 26, 2025, 6:15 a.m. | 8 hours, 46 minutes ago
  Description :‭An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to‬ ‭a crash and a resultant denial of service.‬
  Severity: 7.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-59820 - KDE Krita TGA File Heap-Based Buffer Overflow Vulnerability

  CVE ID :CVE-2025-59820
  Published : Nov. 26, 2025, 6:15 a.m. | 8 hours, 46 minutes ago
  Description :In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.
  Severity: 6.7 | MEDIUM
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-55174 - KDE Skanpage Uncontrolled File Truncation Vulnerability

  CVE ID :CVE-2025-55174
  Published : Nov. 26, 2025, 6:15 a.m. | 8 hours, 46 minutes ago
  Description :In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
  Severity: 3.2 | LOW
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-12061 - Tax Service Electronic HDM tion

  CVE ID :CVE-2025-12061
  Published : Nov. 26, 2025, 6:15 a.m. | 8 hours, 46 minutes ago
  Description :The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-64983 - Ring Video Doorbell Debug Code Remote Code Execution

  CVE ID :CVE-2025-64983
  Published : Nov. 26, 2025, 5:16 a.m. | 9 hours, 45 minutes ago
  Description :Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain access to the device.
  Severity: 8.6 | HIGH
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66235 - Apache Server HTTP Header Injection

  CVE ID :CVE-2025-66235
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66234 - Apache HTTP Server Unauthenticated Remote Code Execution

  CVE ID :CVE-2025-66234
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66233 - Apache HTTP Server Authentication Bypass

  CVE ID :CVE-2025-66233
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66232 - Apache Struts Cross-Site Request Forgery

  CVE ID :CVE-2025-66232
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66231 - Apache HTTP Server Cross-Site Request Forgery

  CVE ID :CVE-2025-66231
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66230 - Apache HTTP Server Unvalidated Redirect

  CVE ID :CVE-2025-66230
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...

• CVE-2025-66229 - Apache HTTP Server Remote Code Execution Vulnerability

  CVE ID :CVE-2025-66229
  Published : Nov. 26, 2025, 4:15 a.m. | 10 hours, 46 minutes ago
  Description :Rejected reason: Not used
  Severity: 0.0 | NA
  Visit the link for more details, such as CVSS details, affected products, timeline, and more...