44845 matches found
CVE-2026-33278 affecting package unbound for versions less than 1.25.1-1
CVE-2026-33278 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42960 affecting package unbound for versions less than 1.25.1-1
CVE-2026-42960 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-43618 affecting package rsync for versions less than 3.4.3-1
CVE-2026-43618 affecting package rsync for versions less than 3.4.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1
CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-40622 affecting package unbound for versions less than 1.25.1-1
CVE-2026-40622 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5947 affecting package bind for versions less than 9.20.23-1
CVE-2026-5947 affecting package bind for versions less than 9.20.23-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5946 affecting package bind for versions less than 9.20.23-1
CVE-2026-5946 affecting package bind for versions less than 9.20.23-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44390 affecting package unbound for versions less than 1.25.1-1
CVE-2026-44390 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42534 affecting package unbound for versions less than 1.25.1-1
CVE-2026-42534 affecting package unbound for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2018-25343: Cross-Site Request Forgery (CSRF)
Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting editprofile.php with hidden fields for email and password parameters that...
CVE-2018-25342: Improper Neutralization of Special Elements used in an SQL Command
Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in search.php. Attackers can send GET requests with malicious SQL payloads like SLEEP commands to extract...
CVE-2018-25341: Improper Neutralization of Special Elements used in an SQL Command
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to product.php with union-based SQL injection payloads in the id parameter to extract...
CVE-2018-25340: Improper Neutralization of Special Elements used in an SQL Command
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to category.php with UNION-based SQL injection payloads in the id parameter to extract...
Debian dsa-6290 : libnss3 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6290 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6290-1 [email protected] https://www.debian.org/securit...
CVE-2026-4093: Improper Neutralization of Input During Web Page Generation
In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline. Vector A token display templates: When the Token module is enabled and token display templates are configured, attacker-controlled token output e.g., term description is rendered...
CVE-2026-37457 affecting package frr for versions less than 10.5.4-1
CVE-2026-37457 affecting package frr for versions less than 10.5.4-1. A patched version of the package is available...
CVE-2025-61732 affecting package golang for versions less than 1.25.10-1
CVE-2025-61732 affecting package golang for versions less than 1.25.10-1. A patched version of the package is available...
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1
CVE-2026-33814 affecting package golang for versions less than 1.26.3-1. An upgraded version of the package is available that resolves this issue...