11813 matches found
CVE-2025-11731 affecting package libxslt for versions less than 1.1.43-3
CVE-2025-11731 affecting package libxslt for versions less than 1.1.43-3. A patched version of the package is available...
[SECURITY] Fedora 42 Update: firefox-146.0-3.fc42
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
CentOS 9 : openssh-9.9p1-3.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-3.el9 build changelog. - Reject URL-strings with NULL characters CVE-2025-61985 - Reject usernames with control characters CVE-2025-61984 Note that Nessus has not...
Alibaba Cloud Linux 3 : 0193: tomcat (ALINUX3-SA-2025:0193)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0193 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-31651: Improper Neutralization of...
CISA Releases 12 Industrial Control Systems Advisories
CISA released 12 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-345-01 Johnson Controls iSTAR ICSA-25-345-02 Johnson Controls iSTAR Ultra ICSA-25-345-03 AzeoTech DAQFactor...
[SECURITY] Fedora 43 Update: python3-docs-3.14.2-1.fc43
The python3-docs package contains documentation on the Python 3 programming language and interpreter...
Ubuntu: Security Advisory (USN-7412-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2025-202316
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...
CVE-2025-66565
Fiber Utils (github.com/gofiber/utils) has a vulnerability in UUIDv4() and UUID() where crypto/rand.Read() failures trigger silent fallbacks to predictable UUID values, including the zero UUID 00000000-0000-0000-0000-000000000000. This root cause affects versions up to 2.0.0-rc.3; the issue is fi...
PT-2025-50215
Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209 Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library .dylib file and execute it within the Sublime Text application’s process. This...
EUVD-2025-201511
A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics AX data and access logs belonging to other Apigee customer organizations. Apigee-X was found to be vulnerable. This vulnerability was patched in version 1-16-0-apigee-3. No user action i...
PT-2025-49328
Name of the Vulnerable Software and Affected Versions Apigee-X versions prior to 1-16-0-apigee-3 Description A security issue in Apigee-X could allow an attacker to gain unauthorized read and write access to Apigee Analytics AX data and access logs belonging to other Apigee customer organizations...
CVE-2025-13488 Nexus Repository 3 - Stored Cross-Site Scripting (XSS)
Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may allow an authenticated attacker with repository upload privileges to exploit a stored cross-site scripting XSS vulnerability with user conte...
TencentOS Server 3: redis:6 (TSSA-2025:0931)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0931 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
GHSA-9MPM-9PXH-MG4F
creationtimestamp| type| source ---|---|--- 2025-12-03 20:46:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657592254208627...
CVE-2025-66293
creationtimestamp| type| source ---|---|--- 2025-12-03 20:00:03+00:00| seen| https://seclists.org/oss-sec/2025/q4/233 2025-12-03 20:11:40+00:00| seen| https://seclists.org/oss-sec/2025/q4/234 2025-12-03 20:37:25+00:00| seen| https://seclists.org/oss-sec/2025/q4/235 2025-12-03 21:35:09+00:00| seen...
CVE-2025-66476
Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...
CVE-2025-61729
Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can...
