ROOT-OS-DEBIAN-12-CVE-2025-38303 CVE-2025-38303 in rootio-linux - Patched by Root

Root has patched CVE-2025-38303 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38303 CVE-2025-38303 in rootio-linux - Patched by Root

Root has patched CVE-2025-38303 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

MAL-2025-38303 Malicious code in victor-banana-vqsr (npm)

The package victor-banana-vqsr was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eircreateadvdata eircreateadvdata may attempt to add...

AZL-64983 CVE-2025-38303 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eircreateadvdata eircreateadvdata may attempt to add EIRFLAGS and EIRTXPOWER without checking if that would fit...

CVE-2025-38303

CVE-2025-38303: In the Linux kernel, Bluetooth eir_create_adv_data could crash when trying to add EIR_FLAGS and EIR_TX_POWER without ensuring they fit. The issue is fixed in the kernel (referenced commits in the connected documents) and affects the Bluetooth/EIR data path; remediation is applying...

CVE-2023-38303

An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting XSS attack to achieve Remote Command Execution RCE through the Users and Group's real name parameter...

CVE-2023-38303

creationtimestamp| type| source ---|---|--- 2023-07-31 18:37:44+00:00| seen| https://t.me/cibsecurity/67454...

CVE-2023-38303

CVE-2023-38303 affects Webmin 2.021. A stored XSS in the Users and Groups real name parameter can lead to Remote Command Execution (RCE). Impact is described as RCE via authenticated user input; CVSS v3.1 base score 5.4 (MEDIUM). Public details from multiple sources confirm the vulnerability in W...

CVE-2022-38303

creationtimestamp| type| source ---|---|--- 2022-09-13 02:24:46+00:00| seen| https://t.me/cibsecurity/49624...

CVE-2022-38303

The CVE-2022-38303 issue affects Online Leave Management System v1.0. A SQL injection vulnerability exists in the id parameter of the /employees/manage_leave_type.php endpoint, enabling potentially unauthorized data access or modification. Root cause: improper handling/sanitization of user-suppli...

CVE-2021-38303

creationtimestamp| type| source ---|---|--- 2021-09-28 22:36:09+00:00| seen| https://t.me/cibsecurity/29596...

CVE-2021-38303

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...

CVE-2021-38303

CVE-2021-38303 involves a SQL injection in Sureline SUREedge Migrator 7.0.7.29360. The vulnerability allows an attacker to execute arbitrary SQL commands via the affected component, with high/severe impact as reflected in CVSS data (CRITICAL/9.8 for CVSS 3.1; High/7.5 for CVSS 2.0). Root cause is...

CVE-2021-38303

A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360...