Low - CVE-2025-5916 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than...
Low - CVE-2025-5917 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a...
Low - CVE-2025-5918 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This...
NA - CVE-2025-49004 - Caido is a web security auditing toolkit. Prior...
Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious...
NA - CVE-2025-49137 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of...
NA - CVE-2025-49138 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint...
NA - CVE-2025-49139 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe....
NA - CVE-2025-49141 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportSite` functionality obtains a URL string from a POST request and...
Medium - CVE-2025-5896 - A vulnerability was found in tarojs taro up to...
A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects unknown code of the file taro/packages/css-to-react-native/src/index.js. The...
Medium - CVE-2025-5897 - A vulnerability was found in vuejs vue-cli up...
A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js...