evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability (CVE-2025-12489)
– This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Krita TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-59820)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Krita.
Read More
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2025-62591)
– This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox.
Read More
Oracle VirtualBox Virtio-net Uninitialized Memory Information Disclosure Vulnerability (CVE-2025-61759)
– This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox.
Read More
Microsoft issues emergency Windows Server updates to patch WSUS vulnerability with proof-of-concept exploit
– Microsoft has issued out-of-band (OOB) security updates to address a critical vulnerability in Windows Server Update Services (WSUS), following the release of publicly available proof-of-concept (PoC) exploit code.
Read MoreCritical Vulnerabilities in Veeam Backup
– On October 14th 2025, Veeam released a security advisory addressing multiple vulnerabilities including 2 critical in its Veeam Backup product.
Read MoreMicrosoft Windows TAR File Parsing NTLM Relay Vulnerability (CVE-2025-59284)
– This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows.
Read More
Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities (CVE-2025-20359 and CVE-2025-20360)
– Multiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive information or to restart.
Read MoreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (CVE-2025-20329)
– A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
Read MorePalo Alto Improper Neutralization of Input in the Management Web Interface (CVE-2025-4615)
– An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands.
Read More