1031 matches found
Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)
The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...
CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5
CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5. A patched version of the package is available...
Exploit for Deserialization of Untrusted Data in Apache Activemq
CVE-2023-46604 !imagehttps://github.com/user-attachments/ass...
Incorrect Default Permissions
Overview docksible is a Deploy and set up Docker Compose based web apps with Ansible Affected versions of this package are vulnerable to Incorrect Default Permissions via the file permissions of docker-compose files. An attacker could gain unauthorized access to sensitive configuration data or...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-vulhub POC script for the vulhub environment of...
CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...
CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...
AZL-60557 CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2025-26153
CVE-2025-26153 describes a stored XSS in Chamilo LMS 1.11.28, specifically in the message compose feature. The vulnerability allows an attacker to inject malicious scripts into messages, which execute when recipients (e.g., administrators) reply to the message. The available documents consistentl...
CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...
CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...
CVE-2025-26153
A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...
CVE-2025-0495 vulnerabilities
Vulnerabilities for packages: kubescape, docker-compose...
GHSA-M4GQ-FM9H-8Q75 vulnerabilities
Vulnerabilities for packages: kubescape, docker-compose...
GHSA-265R-HFXG-FHMG vulnerabilities
Vulnerabilities for packages: helm-push, k3s, eksctl, cilium-cli, neuvector-scanner, wolfictl, kubescape, kubevela, kaniko, k8ssandra-client, docker-cli-buildx, xeol, docker-compose, spegel, docker, osv-scanner, nerdctl, k8sgpt, melange, opa-envoy, buildkitd, newrelic-infrastructure-agent, ctop,...
CVE-2025-0495 vulnerabilities
Vulnerabilities for packages: docker-compose-fips, kubescape, docker-compose...
GHSA-M4GQ-FM9H-8Q75 vulnerabilities
Vulnerabilities for packages: docker-compose-fips, kubescape, docker-compose...
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
...