20507 matches found
CVE-2025-27847
In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash of the nintendo bluetooth controller during hang recovery, which could lead to a kernel pan...
CAN Networks Security in Smart Grids Communication Technologies
The rapid evolution of smart grids requires effective communication protocols to transfer data reliably and securely. Controller Area Network CAN is one of the most recognized protocols that offer reliable data transmission in smart grids due to its robustness, real-time capabilities, and...
CVE-2025-55199 vulnerabilities
Vulnerabilities for packages: flux-source-controller, linkerd2, rancher-fleet, cluster-api-helm-controller, k9s, cerbos, pluto, k8ssandra-client, helm-push, tw, zarf, helm-set-status, kubescape, chartmuseum, cilium-cli, flux, kargo, kots, helm-operator, cert-manager-cmctl, envoy-gateway,...
CVE-2025-55198 vulnerabilities
Vulnerabilities for packages: flux-source-controller, linkerd2, rancher-fleet, cluster-api-helm-controller, k9s, cerbos, pluto, k8ssandra-client, helm-push, zarf, helm-set-status, kubescape, chartmuseum, cilium-cli, flux, kargo, kots, helm-operator, cert-manager-cmctl, envoy-gateway,...
GHSA-F9F8-9PMF-XV68 vulnerabilities
Vulnerabilities for packages: flux-source-controller, linkerd2, rancher-fleet, cluster-api-helm-controller, k9s, cerbos, pluto, k8ssandra-client, helm-push, zarf, helm-set-status, kubescape, chartmuseum, cilium-cli, flux, kargo, kots, helm-operator, cert-manager-cmctl, envoy-gateway,...
GHSA-9H84-QMV7-982P vulnerabilities
Vulnerabilities for packages: flux-source-controller, linkerd2, rancher-fleet, cluster-api-helm-controller, k9s, cerbos, pluto, k8ssandra-client, helm-push, tw, zarf, helm-set-status, kubescape, chartmuseum, cilium-cli, flux, kargo, kots, helm-operator, cert-manager-cmctl, envoy-gateway,...
CVE-2025-45315
A cross-site scripting XSS vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter...
Linux Distros Unpatched Vulnerability : CVE-2024-35978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix memory leak in hcireqsynccomplete In 'hcireqsynccomplete', always free the...
Linux Distros Unpatched Vulnerability : CVE-2024-35816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: prevent leak of left- over IRQ on unbind Commit 5a95f1ded28691e6 firewire:...
Malicious code in dbenvy-ci-controller-client (npm)
The package dbenvy-ci-controller-client was found to contain malicious code...
MAL-2025-12661 Malicious code in @zalastax/nolb-node-red-contl (npm)
The package @zalastax/nolb-node-red-contl was found to contain malicious code...
MAL-2025-18096 Malicious code in dbenvy-ci-controller-client (npm)
The package dbenvy-ci-controller-client was found to contain malicious code...
CVE-2025-8965
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-8310
Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password...
CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-8965 linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to...
CVE-2025-27847
In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout...