Latest Vulnerabilities

Apache Felix Webconsole: XSS in services console (CVE-2025-25247)	2025-02-11 00:32:59 UTC (about 19 hours ago)
Server-Side Request Forgery (SSRF) in activitypub_federation (CVE-2025-25194)	2025-02-11 00:32:59 UTC (about 19 hours ago)
Denial of Service attack on windows app using Netty (CVE-2025-25193)	2025-02-11 00:32:59 UTC (about 19 hours ago)
[XBOW-025-033] Cross-Site Scripting (XSS) via EchoProcess Service in ZOO-Project WPS Server (CVE-2025-25190)	2025-02-11 00:32:59 UTC (about 19 hours ago)
[XBOW-025-031] Reflected Cross-Site Scripting via jobid Parameter in ZOO-Project WPS publish.py CGI Script (CVE-2025-25189)	2025-02-11 00:32:59 UTC (about 19 hours ago)
DNSSEC validation may accept broken authentication chains (CVE-2025-25188)	2025-02-11 00:32:59 UTC (about 19 hours ago)
Net::IMAP vulnerable to possible DoS by memory exhaustion (CVE-2025-25186)	2025-02-11 00:32:59 UTC (about 19 hours ago)
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine (CVE-2025-24970)	2025-02-11 00:32:59 UTC (about 19 hours ago)
OpenProject stored HTML injection vulnerability (CVE-2025-24892)	2025-02-11 00:32:59 UTC (about 19 hours ago)
An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical... (CVE-2025-24200)	2025-02-11 00:32:59 UTC (about 19 hours ago)