133 matches found
MINI-9FMH-56JH-2885
Bulletin has no description...
MINI-2885-3VQW-629P
Bulletin has no description...
MINI-36J8-72RG-2885
Bulletin has no description...
CVE-2026-2885
creationtimestamp| type| source ---|---|--- 2026-02-20 17:35:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116104163122684263 2026-02-21 21:19:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mffkf3kxom2k 2026-02-21 21:19:33+00:00| seen|...
PT-2026-21295
Name of the Vulnerable Software and Affected Versions D-Link DWR-M960 version 1.01.07 Description A security flaw exists in D-Link DWR-M960. The issue is a stack-based buffer overflow in the function sub 469104 of the file /boafrm/formIpv6Setup. The vulnerability is triggered by manipulating the...
EUVD-2026-2885
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences...
CVE-2022-2885
Cross-site Scripting XSS - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0...
CVE-2025-2885
Missing validation of the root metatdata version number could allow an actor to supply an arbitrary version number to the client instead of the intended version in the root metadata file, altering the version fetched by the client. Users should upgrade to tough version 0.20.0 or later and ensure...
tough-kms (>=0.2.0 <=0.5.0), tough-ssm (>=0.5.0 <=0.8.0) +1 more potentially affected by CVE-2025-2885 via tough (>=0.10.0 <=0.1.0)
tough CARGO version =0.10.0, =0.2.0, =0.5.0, =0.1.0, =0.9.0 Source cves: CVE-2025-2885 Source advisory: OSV:GHSA-5VMP-M5V2-HX47...
CVE-2025-2885
creationtimestamp| type| source ---|---|--- 2025-03-27 22:36:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9231 2025-03-28 01:01:04+00:00| seen| https://t.me/cvedetector/21340...
CVE-2025-2885
CVE-2025-2885 affects the Tough root-metadata handling in the Amazon Tough (Rust) client library. The root metadata version number validation is missing, allowing an attacker to supply an arbitrary version instead of the intended one, which could cause the client to fetch a different or outdated ...
CVE-2025-2885 Root metadata version not validated in tough
Missing validation of the root metatdata version number could allow an actor to supply an arbitrary version number to the client instead of the intended version in the root metadata file, altering the version fetched by the client. Users should upgrade to tough version 0.20.0 or later and ensure...
Linux Distros Unpatched Vulnerability : CVE-2024-2885
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromiu...
CVE-2020-2885
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
RHEL 8 : firefox (RHSA-2024:2885)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2885 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
FreeBSD : electron{27,28} -- multiple vulnerabilities (c2431c4e-622c-4d92-996d-d8b5258ae8c9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c2431c4e-622c-4d92-996d-d8b5258ae8c9 advisory. - Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to...
qt6-webengine -- Multiple vulnerabilities
Qt qtwebengine-chromium repo reports: Backports for 16 security bugs in Chromium: CVE-2024-2625: Object lifecycle issue in V8 CVE-2024-2626: Out of bounds read in Swiftshader CVE-2024-2885: Use after free in Dawn CVE-2024-2887: Type Confusion in WebAssembly CVE-2024-3157: Out of bounds write in...
Fedora: Security Advisory for chromium (FEDORA-2024-b4dab205d7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA65382 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in WebAssembly can be exploited to cause...
Fedora: Security Advisory (FEDORA-2024-0bb0e8f2a0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...