Medium - CVE-2025-5895 - A vulnerability was found in Metabase 54.10. It...
A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to...
Low - CVE-2025-5914 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead...
Low - CVE-2025-5915 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber...
Low - CVE-2025-5916 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than...
Low - CVE-2025-5917 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a...
Low - CVE-2025-5918 - A vulnerability has been identified in the...
A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This...
NA - CVE-2025-49004 - Caido is a web security auditing toolkit. Prior...
Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious...
NA - CVE-2025-49137 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application does not sufficiently sanitize user input, allowing for the execution of...
NA - CVE-2025-49138 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticated Local File Inclusion (LFI) vulnerability in the HAXCMS saveOutline endpoint...
NA - CVE-2025-49139 - HAX CMS PHP allows users to manage their...
HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site editor, users can create a website block to load another site in an iframe....