3.7
CVE-2025-7039 - Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulβ¦
5.3
CVE-2025-45424 -
Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication.
9.8
CVE-2025-45813 -
ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.
6.5
CVE-2025-45029 -
WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENT_LENGTH variable at /cgi-bin/upload.cgi.
8.4
CVE-2025-36630 - Local Privilege Escalation
In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege.
7.4
CVE-2025-49741 - Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
0.0
CVE-2025-6992 -
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
5.4
CVE-2025-46259 - WordPress The Plus Addons for Elementor - Pro Plugin < 6.3.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Pro: from n/a before 6.3.7.
6.3
CVE-2025-6600 - GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via β¦
An exposure of sensitive information vulnerability was identified in GitHub Enterprise Server that could allow an attacker to disclose the names of private repositories within an organization. This issue could be exploited by leveraging a user-to-server token with no scopes via the Search API endpoβ¦
7.1
CVE-2025-48379 - Pillow Vulnerable to Write Buffer Overflow on BCn encoding
Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a sufficiently large (>64k encoded with default settings) image in the DDS format due to writing into a buffer without checking for available space. This only affects users who saveβ¦