55865 matches found
PT-2025-46223
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description An authenticated attacker with basic privileges could execute a function module in ABAP to retrieve restricted technical information from the system due to a...
DEBIAN-CVE-2025-12443
Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
Malicious code in convenient_badger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1945367014390cc6aa5c018ea29919b929721c3165ef63c91278aabd47113cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59527 Malicious code in wibowo-tahutek70-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bb245db63cced32c11969d5152fef577765f7622aef22021c2d3b01bdbb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12925 rymcu forest UserDicController.java deleteDic authorization
A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/getAllDic/deleteDic of the file src/main/java/com/rymcu/forest/lucene/api/UserDicController.java. The manipulation results in missing authorization. The attac...
SUSE CVE-2016-11080
An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details...
CGA-45WW-QJR3-47GH
Bulletin has no description...
DEBIAN-CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CGA-7RX9-J6X9-4H6R
Bulletin has no description...
CGA-5RGM-Q397-WWJX
Bulletin has no description...
CGA-8QHV-VHVP-V7MP
Bulletin has no description...
Should you let Chrome store your driver’s license and passport?
Google has rolled out a new autofill feature for Chrome that goes beyond storing just your passwords, addresses, and credit card numbers. The new "enhanced autofill" can now stash your driver's license, passport details, VIN, or license plate information. Sounds convenient, right? But just becaus...
Missing Authentication
Overview Affected versions of this package are vulnerable to Missing Authentication in the xDS interface. An attacker can access sensitive configuration data, including certificate information, backend service details, routing rules, and cluster metadata, by connecting to the exposed port without...
EUVD-2025-37733
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7. An app may be able to bypass Privacy preferences...
EUVD-2025-37633
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...
CGA-6GJX-79M3-2V6H
Bulletin has no description...
CGA-6CFC-4VGW-7VGC
Bulletin has no description...
CGA-6HF7-PX6P-322W
Bulletin has no description...