Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).
A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed.
CVE-2025-59696 is a security vulnerability (CVSS 3.2) that allows a physically proximate attacker. Risk factors: public PoC available.
Path traversal in oci-helper version 3.2.4 and earlier allows authenticated attackers with low privileges to manipulate the
Arbitrary file overwrite via path traversal in Rareprob HD Video Player All Formats 12.1.372 for Android allows local attackers with low privileges to write files outside the intended directory. Exploit code is publicly available, but there is no evidence of active exploitation or KEV listing. The vendor has not responded to the disclosure, leaving the app unpatched.
Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the device. (Chromium security severity: Low)
Mattermost versions 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate the user permission when accessing the files and subscribing to the block in Boards, which allows an authenticated user to access other board files and was able to subscribe to the block from other boards that the user does not have access to
A security vulnerability in nocobase (CVSS 5.6). Remediation should follow standard vulnerability management procedures.
Blind Server-Side Request Forgery in ObjectPlanet Opinio 7.26 (rev12562) enables an authenticated high-privilege user to coerce the survey server into issuing outbound HTTP GET requests to arbitrary internal or external destinations via crafted survey-import payloads. Because the SSRF is blind, the attacker receives no response body, constraining practical impact to internal network probing and side-effect triggering on reachable internal endpoints. EPSS is 0.05% at the 15th percentile, no KEV listing exists, and no public exploit code has been identified.