275 matches found
CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38061 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38345 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38191 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
CVE-2025-54446
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54447
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...
DEBIAN-CVE-2025-8010
Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
Below - Local Privilege Escalation CVE-2025-27591 B...
WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Ann Patchstack Alliance in WordPress Theme Traveler versions 3.2.2...
AZL-65565 CVE-2025-53605 affecting package rust for versions less than 1.75.0-17
The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...
AZL-64659 CVE-2025-5351 affecting package libssh for versions less than 0.10.6-2
A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additiona...
AZL-64170 CVE-2025-50181 affecting package python-urllib3 for versions less than 1.26.19-2
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attemptin...
CVE-2025-47865
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations...
AZL-62242 CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...
Astra Linux - уязвимость в firefox, thunderbird
Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first This vulnerability affects Firefox for iOS 136...
AZL-60557 CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
AZL-59960 CVE-2025-21948 affecting package kernel for versions less than 5.15.180.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...
WordPress Traveler theme < 3.2.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Traveler versions 3.2.1...
CVE-2024-50053
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature...
CVE-2025-1723
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug...