14333 matches found
CVE-2025-23206 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
The AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow...
CVE-2025-23206 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
The AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow...
CVE-2025-23206 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk
The AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow...
Microsoft Windows HTML Platforms Security Feature Bypass Vulnerability
Microsoft Windows HTML Platforms is a technology for rendering and executing HTML content on the Windows operating system. A security feature bypass vulnerability exists in Microsoft Windows HTML Platforms, which is caused by a security feature bypass vulnerability in the HTML Platforms component...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update January 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PT-2025-4997 · Quotemedia · Quotemedia Tools
Name of the Vulnerable Software and Affected Versions: QuoteMedia Tools versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: For...
Microsoft Office 2016 Security Feature Bypass Vulnerability (KB5002595)
This host is missing an important security update according to Microsoft KB5002595 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
VulnCheck KEV: CVE-2022-44149
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
GHSA-7CMP-CGG8-4C82 Silverstripe Framework has a XSS via insert media remote file oembed
Impact When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website...
CVE-2025-21364
Microsoft Excel Security Feature Bypass Vulnerability...
CVE-2025-21364
Microsoft Excel Security Feature Bypass Vulnerability...
CVE-2025-21346
Microsoft Office Security Feature Bypass Vulnerability...
CVE-2025-21340
Windows Virtualization-Based Security VBS Security Feature Bypass Vulnerability...
CVE-2025-21332
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21332
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21329
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21329
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21299
Windows Kerberos Security Feature Bypass Vulnerability...