CVE-2025-4949 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard, nextflow, gradle, apicurio-registry, sonarqube-10, wildfly...

CVE-2023-6384

The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar...

CVE-2023-41899

Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...

CVE-2025-47291 vulnerabilities

Vulnerabilities for packages: wolfictl, zot, melange, k3s, cg...

CVE-2021-21976

vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5 contain a post-authentication command injection vulnerability which may allow an authenticated admin user to perform a remote code execution...

CVE-2024-37372 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2020-3703

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central deviceThis CVE is equivalent to Link Layer Length Overfow issue CVE-2019-16336,CVE-2019-17519 and Silent Length Overflow issueCVE-2019-17518 mentioned in...

CVE-2020-1818

There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities...

CVE-2019-0823

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824, CVE-2019-0825, CVE-2019-0826,...

CVE-2018-17947

The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter...

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

CVE-2024-6839 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6866 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6844 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6844 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

expat security update

2.5.0-5 - Fix CVE-2024-8176 - Resolves: RHEL-57489 2.5.0-4 - Fix CVE-2024-50602 - Resolves: RHEL-65066...

libsoup security update

2.72.0-10.1 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85906 Resolves: RHEL-85912 Resolves: RHEL-85919 Resolves: RHEL-87061 Resolves: RHEL-87069 Resolves: RHEL-87102 Resolves: RHEL-87120 Resolves: RHEL-88364 Resolves: RHEL-88367...

SUSE: Security Advisory (SUSE-SU-2025:01620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:01633-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.52 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...