Everything Circuit Observer has reported about NVD: 4 stories, newest first. Part of our Vulnerabilities coverage.
A critical vulnerability in Adobe ColdFusion allows remote code execution without user interaction, affecting versions up to 2025.0.13 and 2023.0.25.
A critical vulnerability in IBM DataStage allows authenticated attackers to access sensitive data, requiring immediate review of access controls.
A critical vulnerability in sandboxed.sh versions up to 1.3.0 lets container code bypass isolation and access the host filesystem due to missing nsenter flags.
An unauthenticated flaw in phpMyFAQ allows remote attackers to extract database secrets via Unicode input, rated critical by the NVD.