1366 matches found
OPENSUSE-SU-2025:15504-1 dcmtk-3.6.9-4.1 on GA media
These are all security issues fixed in the dcmtk-3.6.9-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15511-1 libudisks2-0-2.10.1-4.1 on GA media
These are all security issues fixed in the libudisks2-0-2.10.1-4.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2020-36306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the backurl field. CVE-2020-36306 Note that Nessus relies on the presence of the package as reported by...
Linux Distros Unpatched Vulnerability : CVE-2014-7217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticate...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM)(CVE-2025-33142)
Summary WebSphere Application Server is shipped as a component of IBM Security Guardium Key Lifecycle Manager SKLM/GKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulleti...
Linux Distros Unpatched Vulnerability : CVE-2020-11612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large...
Linux Distros Unpatched Vulnerability : CVE-2015-8955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/arm64/kernel/perfevent.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service invalid point...
CVE-2025-9094
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
PT-2025-33619
Name of the Vulnerable Software and Affected Versions: ThingsBoard version 4.1 Description: A vulnerability exists in ThingsBoard that affects unknown code within the Add Gateway Handler component. The issue involves improper neutralization of special elements used in a template engine, allowing...
OPENSUSE-SU-2025:15397-1 gdk-pixbuf-devel-2.42.12-4.1 on GA media
These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15291-1 erlang-rabbitmq-client-3.13.7-4.1 on GA media
These are all security issues fixed in the erlang-rabbitmq-client-3.13.7-4.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-28992
CVE-2025-28992 affects the WordPress theme SNS Anton (versions n/a through 4.1). The vulnerability is an improper control of filename for Include/Require statements, i.e., a PHP Local File Inclusion (LFI) flaw that could enable local file access via include/require. The CVSS3.1 base metrics cited...
CVE-2025-30939 WordPress IFrame Widget plugin <= 4.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debashish IFrame Widget iframe-widget allows Stored XSS.This issue affects IFrame Widget: from n/a through = 4.1...
OPENSUSE-SU-2025:15177-1 ffmpeg-7-7.1.1-4.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1.1-4.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-23014 · Unknown · Phpgurukul News Portal Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue has been found in the PHPGurukul News Portal Project, affecting an unknown functionality of the file /admin/add-category.php. The manipulation of the Category argument...
PT-2025-23017 · Unknown · Phpgurukul News Portal Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue was found in the PHPGurukul News Portal Project, affecting some unknown functionality of the file /admin/edit-category.php. The manipulation of the Category argument lea...
PHPGurukul News Portal Project 注入漏洞
News Portal Project is a news portal project. News Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements for the parameter Category in the file /admin/add-category.php. An attacker can exploit this vulnerability ...
PT-2025-23020 · Unknown · Phpgurukul News Portal Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical vulnerability was found in the PHPGurukul News Portal Project. The issue affects the file /admin/edit-subadmin.php, where the manipulation of the emailid argument leads to SQL...