196 matches found
MiracleLinux 3 : glibc-2.5-118.3.0.1.AXS3 (AXSA:2014-522:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-522:01 advisory. Description: The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory,...
CVE-2021-0475
In onl2capdataind of btifsockl2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...
CVE-2016-0475 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9...
CVE-2020-0475
In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-0475
Removed by vendor...
CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances...
CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances...
CVE-2025-0475
creationtimestamp| type| source ---|---|--- 2025-02-27 06:26:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b53egjb27 2025-02-27 19:09:35+00:00| seen| https://bsky.app/profile/andranglin.bsky.social/post/3lj6lr3ihks2m 2025-03-02 13:24:32+00:00| seen|...
CBL Mariner 2.0 Security Update: packer / terraform (CVE-2023-0475)
The version of packer / terraform installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0475 advisory. - HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 an...
CVE-2023-0475 affecting package terraform for versions less than 1.3.2-22
CVE-2023-0475 affecting package terraform for versions less than 1.3.2-22. A patched version of the package is available...
CVE-1999-0475 affecting package procmail 3.22-53
CVE-1999-0475 affecting package procmail 3.22-53. No patch is available currently...
CVE-2023-0475 affecting package k3s 1.24.12-2
CVE-2023-0475 affecting package k3s 1.24.12-2. This CVE either no longer is or was never applicable...
SUSE CVE-2023-0475
HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...
CVE-2023-0475 affecting package packer for versions less than 1.8.7-1
CVE-2023-0475 affecting package packer for versions less than 1.8.7-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-0475
creationtimestamp| type| source ---|---|--- 2024-01-13 01:26:58+00:00| seen| https://t.me/ctinow/167645 2024-02-02 11:36:26+00:00| seen| https://t.me/ctinow/178037...
CVE-2024-0475
CVE-2024-0475 affects code-projects Dormitory Management System 1.0, specifically the modifyuser.php file where the user_id argument can be manipulated to achieve SQL injection. Multiple connected sources confirm a remote-exploitable vulnerability with high impact on confidentiality, integrity, a...
CVE-2024-0475 code-projects Dormitory Management System modifyuser.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown functionality of the file modifyuser.php. The manipulation of the argument userid leads to sql injection. The attack may be launched remotely...
Important Photon OS Security Update - PHSA-2023-4.0-0475
Updates of 'openldap', 'mozjs' packages of Photon OS have been released...
Security Bulletin: Vulnerability in IBM Java Runtime affects IBM SAN Volume Controller and Storwize Family (CVE-2016-0475)
Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 7 that is used by IBM SAN Volume Controller and Storwize Family. These issues were disclosed as part of the IBM Java SDK updates in January 2016. SAN Volume Controller and Storwize Family has addressed...