23684 matches found
PT-2025-52469
Уязвимость функции ParamsCalculator::getTextUTF8 модуля ParamsCalculator.cpp системы управления базами данных «Ред База Данных» связана с недостаточной проверкой вводимых данных при обработке длины строкового параметра. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GStreamer Base Plugins vulnerabilities (USN-7827-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7827-1 advisory. Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibl...
Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak
Summary Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address the vulnerabilites. Vulnerability Details...
USN-7827-1: GStreamer Base Plugins vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service...
USN-7827-1 gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service...
RESCUE: Retrieval Augmented Secure Code Generation
Despite recent advances, Large Language Models LLMs still generate vulnerable code. Retrieval-Augmented Generation RAG has the potential to enhance LLMs for secure code generation by incorporating external security knowledge. However, the conventional RAG design struggles with the noise of raw...
RLSA-2025:12280 Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Core part of Jackson that defines Streaming API as well as basic shared abstractions. Security Fixes: com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
RockyLinux 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (RLSA-2025:12280)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12280 advisory. com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 Tenable has extracted the preceding description block directly...
CVE-2025-60360
radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread...
CVE-2025-62427
The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request Forgery SSRF flaw within the URL resolution mechanism of Angular's Server-Side Rendering package @angular/ssr before 19.2.18, 20.3.6, and 21.0.0-next.8. The function createRequestU...
CVE-2025-56700
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
Malicious code in @nunes_nunes/loader-base (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48470 Malicious code in @nunes_nunes/loader-base (npm)
The package communicates with a domain associated with malicious activity...
openSUSE Security Advisory (SUSE-SU-2025:03599-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the /mailbox/{mailbox_id}/knowledge-base component of the Knowledge Base module of the FreeScout support service system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the /mailbox/mailboxid/knowledge-base component of the Knowledge Base module of the FreeScout support service management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
The vulnerability of the Knowledge Base module of the FreeScout support service management system allows attackers to carry out XSS attacks.
The vulnerability of the Knowledge Base module of the FreeScout support service management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Security Bulletin: A vulnerability in RedHat UBI affects IBM Robotic Process Automation for Cloud Pak and may result in buffer overflow (CVE-2025-0395).
Summary A vulnerability in RedHat UBI affects IBM Robotic Process Automation for Cloud Pak and may result in buffer overflow. RedHat UBI is used as base imaged for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address this vulnerability...
EUVD-2025-34774
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
Base Digitale Centrax Open PSIM 安全漏洞
Base Digitale Centrax Open PSIM is a platform for physical security management from Base Digitale, Italy. A security vulnerability exists in Base Digitale Centrax Open PSIM version 6.1 that stems from the cmd component not validating the sender parameter, which could lead to an SQL injection atta...
