23517 matches found
Debian dla-4419 : gstreamer1.0-gtk3 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4419 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4419-1 [email protected]...
PT-2025-52699
Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x Description The software contains an unauthenticated directory traversal flaw. Remote attackers can write arbitrary files by manipulating the upgfile parameter within the 'upload.cgi' script...
PT-2025-52696
Name of the Vulnerable Software and Affected Versions SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x Description The software contains an insecure direct object reference issue. This allows attackers to bypass authorization and access hidden system resources. Attackers can exploit the issue by...
BIT-PARSE-2025-67727 Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management
Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0, a GitHub CI workflow is triggered in a way that grants the GitHub Actions workflow elevated permissions, giving it access to GitHub secrets and write permissions which...
CLSA-2025-1766049566 Update of buildah
Bump release version to 2:1.39.6-1.tuxcare.els3...
PT-2025-52381
Name of the Vulnerable Software and Affected Versions Hugging Face Transformers megatron gpt2 affected versions not specified Description A flaw exists in the parsing of checkpoints within Hugging Face Transformers megatron gpt2, stemming from insufficient validation of user-supplied data. This c...
EUVD-2025-203888
Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context...
PYSEC-2025-87
Edge3 Worker RPC RCE on Airflow 2. This issue affects Apache Airflow Providers Edge3: before 2.0.0 - and only if you installed and configured it on Airflow 2. The Edge3 provider support in Airflow 2 has been always development-only and not officially released, however if you installed and...
GHSA-VFM5-CR22-JG3M ABP Account Module has an Open Redirect through Improper validation in its register function
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
CVE-2025-11230 affecting package haproxy for versions less than 2.4.24-2
CVE-2025-11230 affecting package haproxy for versions less than 2.4.24-2. A patched version of the package is available...
Ubuntu: Security Advisory (USN-7930-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-65581
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
CVE-2025-10158 affecting package rsync for versions less than 3.4.1-2
CVE-2025-10158 affecting package rsync for versions less than 3.4.1-2. A patched version of the package is available...
CVE-2025-64437 affecting package kubevirt for versions less than 1.5.3-2
CVE-2025-64437 affecting package kubevirt for versions less than 1.5.3-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-64432 affecting package kubevirt for versions less than 1.5.3-2
CVE-2025-64432 affecting package kubevirt for versions less than 1.5.3-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-64434 affecting package kubevirt for versions less than 1.5.3-2
CVE-2025-64434 affecting package kubevirt for versions less than 1.5.3-2. An upgraded version of the package is available that resolves this issue...
EUVD-2025-203121
Vuetify has a Prototype Pollution vulnerability...
Vuetify has a Prototype Pollution vulnerability
The Preset configuration feature of Vuetify is vulnerable to Prototype Pollution due to the internal 'mergeDeep' utility function used to merge options with defaults. Using a specially-crafted, malicious preset can result in polluting all JavaScript objects with arbitrary properties, which can...
CVE-2025-8083 Vuetify Prototype Pollution via Preset options
The Preset configuration https://v2.vuetifyjs.com/en/features/presets feature of Vuetify is vulnerable to Prototype Pollution https://cheatsheetseries.owasp.org/cheatsheets/PrototypePollutionPreventionCheatSheet.html due to the internal 'mergeDeep' utility function used to merge options with...
