30178 matches found
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Rack vulnerabilities (USN-7366-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7366-1 advisory. Nht Thi discovered that Rack incorrectly handled certain usernames. A remote attacker...
OPENSUSE-SU-2025:14920-1 gitleaks-8.24.2-1.1 on GA media
These are all security issues fixed in the gitleaks-8.24.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14919-1 forgejo-10.0.3-1.1 on GA media
These are all security issues fixed in the forgejo-10.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-22513 · Sangoma +1 · Asterisk +2
Name of the Vulnerable Software and Affected Versions: Asterisk versions prior to 18.26.2 Asterisk versions prior to 20.14.1 Asterisk versions prior to 21.9.1 Asterisk versions prior to 22.4.1 certified-asterisk versions prior to 18.9-cert14 certified-asterisk versions prior to 20.7-cert5...
Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : elfutils vulnerabilities (USN-7369-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7369-1 advisory. It was discovered that readelf from elfutils could be made to read out of bounds. If a user or automated system were tricked into...
GHSA-5MH9-R3RR-9597 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-FMJ5-WV96-R2CH vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-3XRR-7M6P-P7XH vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-2X83-R56G-CV47 vulnerabilities
Vulnerabilities for packages: hadoop-fips...
CVE-2025-29795
CVE-2025-29795 describes an elevation-of-privilege vulnerability in Microsoft Edge (Chromium-based) due to improper link resolution before file access ("link following"). An authorized attacker could trigger local privilege escalation. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I...
GHSA-HHM6-JJF4-6PM3 vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-Q298-375F-5Q63 vulnerabilities
Vulnerabilities for packages: trino, flyway...
GHSA-WHH8-FJGC-QP73 vulnerabilities
Vulnerabilities for packages: nemo...
GHSA-F686-HW9C-XW9C vulnerabilities
Vulnerabilities for packages: trino...
GHSA-FJ7X-Q9J7-G6Q6 vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2025-0508
A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...
CVE-2024-10363
In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions...
CVE-2024-9000
In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...
CVE-2024-8024
A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...