13698 matches found
JLSEC-2025-212 An issue was discovered in Mbed TLS before 2.24.0
An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name the cn argument of mbedtlsx509crtverify with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to an...
AZL-70660 CVE-2025-40210 affecting package kernel for versions less than 6.6.112-1
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
CVE-2025-12135
creationtimestamp| type| source ---|---|--- 2025-11-21 10:25:17+00:00| seen| https://gist.github.com/Darkcrai86/ed1fb6823be559a18a6bb36e28b17111...
CVE-2025-64524 CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault...
CVE-2025-64984
creationtimestamp| type| source ---|---|--- 2025-11-20 11:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m62ntbb3hw2j...
CVE-2025-64767
creationtimestamp| type| source ---|---|--- 2025-11-19 22:23:43+00:00| published-proof-of-concept| https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 2025-11-21 19:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m662o4dcbv2q 2025-11-22 01:34:02+00:00|...
Cross-site Scripting (XSS)
org.opencastproject:opencast-common is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unfiltered rendering of user-supplied metadata in the paella player, which allows an attacker with write access to inject malicious HTML or JavaScript that executes in viewers’ browsers...
mptcp: move subflow cleanup in mptcp_destroy_common()
...
egovframe-common-components 安全漏洞
egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which originates from an unauthenticated file upload endpoint and could lead...
egovframe-common-components 安全漏洞
egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which stems from a design flaw in symmetric encryption that could lead to an...
CVE-2025-55058
CWE-20 Improper Input Validation...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46724)
drm/amdgpu: vulnerability in drm/amdgpu that involved an out-of-bounds read of dfv17channelnumber. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
EUVD-2025-197848
CWE-20 Improper Input Validation...
EUVD-2025-197852
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
Fedora: Security Advisory (FEDORA-2025-daa6238745)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2025-12765
pgAdmin = 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...
OpenSCAP Libraries 1.3.13
The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...
PT-2025-46787
🟠 Parse Server, Information Disclosure, CVE-2023-43605 Medium https://t.co/5zLHiihOZO...
CVE-2025-13058
A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The patch is identified as...