CVE-2025-46342 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-JRR2-X33P-6HVC vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

CVE-2025-46342 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-JRR2-X33P-6HVC vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

jettison: parser crash by stackoverflow

A stack-based buffer overflow vulnerability was found in Jettison, where parsing an untrusted XML or JSON data may lead to a crash. This flaw allows an attacker to supply content that causes the parser to crash by writing outside the memory bounds if the parser is running on user-supplied input,...

[SECURITY] Fedora 41 Update: rust-ron-0.9.0-1.fc41

Rusty Object Notation...

[SECURITY] Fedora 42 Update: rust-ron-0.9.0-1.fc42

Rusty Object Notation...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the field label or handle during the import process from JSON. An attacker can execute arbitrary scripts in the context of the interface by inserting malicious content into these fields. Note: This is only...

CVE-2025-31895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

USN-7404-1 phpseclib vulnerabilities

It was discovered that phpseclib did not correctly handle RSA PKCS1 v1.5 signature verification. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 20.04 LTS. CVE-2021-30130 It was discovered that phpseclib did not correctly handle certain characte...

CVE-2025-31895

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

CVE-2025-31895 WordPress ABC Notation Plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in paulrosen ABC Notation abc-notation allows Stored XSS.This issue affects ABC Notation: from n/a through = 6.1.3...

WordPress plugin ABC Notation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.193...

CVE-2025-29778 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

GHSA-46MP-8W32-6G94 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws...

CVE-2025-29778 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws, kyverno-fips, kyverno-notation-aws-fips, commercial-kyverno...

GHSA-46MP-8W32-6G94 vulnerabilities

Vulnerabilities for packages: kyverno, kyverno-notation-aws, kyverno-fips, kyverno-notation-aws-fips, commercial-kyverno...

The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PYSEC-2025-83

A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint...