HPESBHF05041 rev.2 - Certain HPE SimpliVity Servers Using Certain AMD EPYC Processors, AMD-SB-7054: Incorrect use of LocateProtocol Service of the EFI_BOOT_Services table in SMI Handler, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to SimpliVity Gen10 Support Pack 2026-0417 HPE SimpliVity 325 Gen10 Plus - Prior to SimpliVity Gen10 Support Pack 2026-0417 HPE SimpliVity 32...

Oracle Linux 9 : vsftpd (ELSA-2026-0605)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-0605 advisory. - Fix CVE-2025-14242 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

CVE-2026-0605

creationtimestamp| type| source ---|---|--- 2026-01-05 22:07:46+00:00| seen| Telegram/dnE6g3S2HF2ctEv4QL4AWKZnSnaJLWH3AV76rFV0fRF-qPg...

CVE-2026-0605

The CVE-2026-0605 entry concerns code-projects Online Music Site 1.0, specifically a SQL injection in the /login.php handler caused by improper handling/manipulation of the username and password parameters. All connected documents consistently indicate the flaw is exploitable remotely and that th...

EUVD-2026-0605

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2003-0737

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-0605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In pfkeydump of afkey.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel wit...

CVE-2025-0605

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...

CVE-2024-0605

Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sites in urlbar. This bypasses security measures, potentially leading to arbitrary code execution or unauthorized actions within the user's loaded webpage. This vulnerability affec...

CVE-2025-0605

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...

CVE-2025-0605

creationtimestamp| type| source ---|---|--- 2025-05-22 14:43:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17277...

CVE-2025-0605

CVE-2025-0605 affects GitLab CE/EE: versions 16.8 up to before 17.10.7, 17.11 up to before 17.11.3, and 18.0 up to before 18.0.1. The issue allows certain users to bypass two‑factor authentication due to group access controls. The connected documents confirm the vulnerability scope and impact but...

CVE-2025-0605

Removed by vendor...

CVE-2025-0605 Weak Authentication in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements...

GitLab 16.8 < 17.10.7 / 17.11 < 17.11.3 / 18.0 < 18.0.1 (CVE-2025-0605)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass...

Linux Distros Unpatched Vulnerability : CVE-2017-0605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was n...

SUSE: Security Advisory (SUSE-SU-2025:0605-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in wlwz-2312-0605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f5d11a952e9ce33409441a2d8039b0e4df70a7e4c1305c4f9bfce5a4231480b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-229 Malicious code in wlwz-2312-0605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f5d11a952e9ce33409441a2d8039b0e4df70a7e4c1305c4f9bfce5a4231480b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-0605

creationtimestamp| type| source ---|---|--- 2024-01-22 20:26:23+00:00| seen| https://t.me/ctinow/171398 2024-02-16 09:41:30+00:00| seen| https://t.me/ctinow/186213...