CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: kubernetes, zot, k9s, nerdctl, spegel, kots, trivy-operator, envoy-gateway, neuvector-scanner, skaffold, grype, docker, kubescape, newrelic-infrastructure-agent, checksec, wolfictl, dagger, mesosphere-vsphere-csi, zarf, skopeo, osv-scanner, trivy, grafana-alloy,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: kubernetes, zot, k9s, nerdctl, spegel, kots, trivy-operator, envoy-gateway, neuvector-scanner, skaffold, grype, docker, kubescape, newrelic-infrastructure-agent, checksec, wolfictl, dagger, mesosphere-vsphere-csi, zarf, skopeo, osv-scanner, trivy, grafana-alloy,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: zarf, nerdctl-fips, docker, k8s-device-plugin, kots, blob-csi-fips, grype-fips, trivy-operator-fips, virt-handler-fips, xeol-fips, azure-container-networking, dagger, spegel, undock, buildah, containerd, kubescape, rancher-agent, skopeo, k9s-fips, spegel-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cluster-autoscaler-fips, rke2-runtime, cluster-autoscaler, sriov-network-device-plugin-fips, eks-distro, node-feature-discovery, grafana-alloy, nvidia-container-toolkit, kubernetes, virt-handler-fips, k3s, azure-container-networking,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cluster-autoscaler-fips, rke2-runtime, cluster-autoscaler, sriov-network-device-plugin-fips, eks-distro, node-feature-discovery, grafana-alloy, nvidia-container-toolkit, kubernetes, k3s, azure-container-networking,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cluster-autoscaler-fips, rke2-runtime, cluster-autoscaler, sriov-network-device-plugin-fips, eks-distro, node-feature-discovery, grafana-alloy, nvidia-container-toolkit, kubernetes, virt-handler-fips, k3s, azure-container-networking,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: zarf, nerdctl-fips, docker, k8s-device-plugin, kots, blob-csi-fips, grype-fips, trivy-operator-fips, virt-handler-fips, xeol-fips, azure-container-networking, dagger, spegel, undock, buildah, containerd, kubescape, rancher-agent, skopeo, k9s-fips, spegel-fips,...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin, cluster-autoscaler-fips, rke2-runtime, cluster-autoscaler, sriov-network-device-plugin-fips, eks-distro, node-feature-discovery, grafana-alloy, nvidia-container-toolkit, kubernetes, k3s, azure-container-networking,...

EUVD-2025-38242

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Playlists feature is vulnerable to stored Cross-site Scripting XSS,specifically in the Playlist Name field. An authenticated low-privileged user can create a playlist with a malicious name containi...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

CVE-2025-63639

The CVE-2025-63639 entry describes an XSS vulnerability in Sourcecodester FAQ Bot with AI Assistant v1.0, specifically in the chat feature where user input is not properly sanitized. Affected component: chat/messages handling in the FAQ Bot. Root cause: improper handling of user-supplied input le...

ClipBucket V5 安全漏洞

ClipBucket V5 is a video hosting platform for MacWarrior individual developers. A security vulnerability exists in ClipBucket V5 5.5.2-146 and prior versions, which stems from the Manage Photos feature mishandling the Photo Title parameter, which could lead to a stored cross-site scripting attack...

CVE-2025-64176 ThinkDashboard: Arbitrary File Upload vulnerability in the Backup Import Feature

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript. In versions 0.6.7 and below, an attacker can upload any file they wish to the /data directory of the web application via the backup import feature. When importing a backup, an attacker can first choose a .zip...

EUVD-2025-38150

An issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...

[SECURITY] Fedora 42 Update: qt5-qtspeech-5.15.18-1.fc42

The module enables a Qt application to support accessibility features such as text-to-speech, which is useful for end-users who are visually challenged or cannot access the application for whatever reason. The most common use case where text-to-speech comes in handy is when the end-user is drivin...

PT-2025-45346

Name of the Vulnerable Software and Affected Versions AnyDesk versions prior to 9.0.0 Description An issue exists where an integer overflow can lead to a heap-based buffer overflow. This occurs through the processing of a UDP packet, specifically during the handling of an Identity user image with...

CVE-2025-27918

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...