23862 matches found
EUVD-2019-12324
Malware in sbrugna...
EUVD-2019-12550
Malware in sbrugna...
EUVD-2016-4828
Malware in sbrugna...
PT-2025-41828
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows for...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414539 advisory. A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that functio...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-986145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986145 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23...
CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
CVE-2025-58579
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
The vulnerability of oFono’s mobile communication interface, related to buffer overflow in the stack, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the oFono mobile communication interface is related to buffer overflow on the stack. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2025-60956
A Cross Site Request Forgery (CSRF) vulnerability exists in the EndRun Technologies Sonoma D12 Network Time Server (GPS) , specifically affecting firmware F/W 6010-0071-000 Ver 4.00 . This flaw allows an attacker to execute arbitrary code , cause a denial of service , gain escalated privileges , ...
CVE-2025-60956
Cross Site Request Forgery CSRF vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information...
The vulnerability of the SimToolKit component of the oFono mobile communication interface allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SimToolKit component, which is part of the oFono mobile communication interface, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to access confidential data, compromise its integrity, and cause...
The vulnerability of the H5O_link_decode function in the H5Olink.c component of the HDF file processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the H5Olinkdecode function in the H5Olink.c component of the HDF file processing library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential...
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the posix/JackSocket.cpp component in the JACK2 audio server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the posix/JackSocket.cpp component of the JACK2 audio server is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
BIT-MONGODB-2025-6713 MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage
An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB...
kernel security update
An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
EUVD-2025-26855
Malicious code in bioql PyPI...