31800 matches found
[SECURITY] Fedora 41 Update: webkitgtk-2.48.1-2.fc41
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...
USN-7421-1 linux-azure-5.15, linux-azure-fde-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...
CVE-2024-45557 Use of Out-of-range Pointer Offset in Trust Management Engine
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...
CVE-2024-45557 Use of Out-of-range Pointer Offset in Trust Management Engine
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...
CVE-2024-45557
CVE-2024-45557 describes memory corruption in Qualcomm’s Trust Management Engine (TME) when it processes addresses from TZ and MPSS requests without proper validation, affecting Qualcomm chipsets. The CVSSv3.1 base score is 7.8 (High) with Local, Low complexity, Low privileges, and no user intera...
Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7421-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7421-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...
The vulnerability of the Jenkins Templating Engine (JTE) in the Jenkins automation server, related to improper code generation management, allows attackers to bypass security restrictions and execute arbitrary code.
The vulnerability of the Jenkins Templating Engine JTE in the Jenkins automation server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code...
CVE-2025-31442
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e1tekoap42 Search engine keywords highlighter keywords-highlight-tool allows Reflected XSS.This issue affects Search engine keywords highlighter: from n/a through = 0.1.3...
[SECURITY] Fedora 40 Update: chromium-135.0.7049.52-2.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
CVE-2025-31722
In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...
PT-2025-22379 · Cisco · Cisco Identity Services Engine
Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE version 3.4 Description: A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS...
PT-2025-14855 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS versions up to 5.2.4 Description: A vulnerability has been found in the function engine.getTemplate of the file /readTemplate, where the manipulation of the template argument leads to path traversal. The attack can be launched...
Security Bulletin: IBM Maximo Application Suite - Predict Component vulnerable to jinja is an extensible templating engine.
Summary Security Bulletin: IBM Maximo Application Suite - Predict Component vulnerable to jinja is an extensible templating engine. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible...
CVE-2025-31442
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e1tekoap42 Search engine keywords highlighter keywords-highlight-tool allows Reflected XSS.This issue affects Search engine keywords highlighter: from n/a through = 0.1.3...
CVE-2025-31442 WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Search engine keywords highlighter allows Reflected XSS. This issue affects Search engine keywords highlighter: from n/a through 0.1.3...
CVE-2025-31442
CVE-2025-31442 : The WordPress extension “Search engine keywords highlighter” is affected by a Reflected XSS (improper neutralization of input during web page generation). Affected versions are from n/a up to and including 0.1.3. The connected document confirms the issue type and affected plugin/...
CVE-2025-30870
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...
[SECURITY] Fedora 40 Update: corosync-3.1.9-2.fc40
This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...
[SECURITY] Fedora 40 Update: suricata-7.0.10-1.fc40
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...