8830 matches found
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
Cisco Unified Computing System Manager Privilege Escalation
The vulnerability of the command-line interface CLI of the Cisco Unified Computing System UCS Manager relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to gain read, modify, and create arbitrary files...
SUSE CVE-2023-53568
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568
Vulnerability (CVE-2023-53568) in the Linux kernel affects s390/zcrypt: when dev_set_name() fails, zcdn_create() leaks newly allocated resources instead of freeing them. The issue has been resolved by ensuring proper cleanup. The provided description notes the root cause and fix, and linked refer...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
CVE-2023-53568 s390/zcrypt: don't leak memory if dev_set_name() fails
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: don't leak memory if devsetname fails When devsetname fails, zcdncreate doesn't free the newly allocated resources. Do it...
EUVD-2025-28798
Malicious code in bioql PyPI...
EUVD-2024-32837
Malicious code in bioql PyPI...
EUVD-2025-17145
Malicious code in bioql PyPI...
EUVD-2023-40138
Malicious code in bioql PyPI...
EUVD-2025-24864
Malicious code in bioql PyPI...
EUVD-2025-25750
Malicious code in bioql PyPI...
EUVD-2021-30631
Malicious code in bioql PyPI...
EUVD-2025-25583
Malicious code in bioql PyPI...
EUVD-2025-24170
Malicious code in bioql PyPI...
EUVD-2025-24868
Malicious code in bioql PyPI...