8395 matches found
CVE-2025-57275
Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...
PT-2025-40249
Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit SPDK version 25.05 Description The Storage Performance Development Kit SPDK version 25.05 contains a buffer overflow in the NVMe-oF target component, specifically within lib/nvmf. Recommendations At the...
Storage Performance Development Kit security vulnerabilities
Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit SPDK version 25.05...
CVE-2025-57275
Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...
CVE-2025-57275
Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...
CVE-2025-57275: Buffer Copy without Checking Size of Input
Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...
CVE-2025-57275
The Storage Performance Development Kit (SPDK) 25.05 is affected by a Buffer Overflow vulnerability within the NVMe-oF target component located in lib/nvmf. The root cause is a classic buffer overflow resulting from copying data without checking the input size (CWE-120 ). This vulnerability has a...
NewStart CGSL MAIN 6.06 : p11-kit Multiple Vulnerabilities (NS-SA-2025-0209)
The remote NewStart CGSL host, running version MAIN 6.06, has p11-kit packages installed that are affected by multiple vulnerabilities: - An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remo...
CVE-2025-60120
Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...
Malicious code in @my-pvz/ui-kit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc756704726b9cfb66ba52746b5d42a7b6f8742370a8bf409a664879607281 Any computer that has this package installed or running should be considered...
MAL-2025-47839 Malicious code in @my-pvz/ui-kit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc756704726b9cfb66ba52746b5d42a7b6f8742370a8bf409a664879607281 Any computer that has this package installed or running should be considered...
ml-medic-kit (>=0.1.9, <=0.2.1) potentially affected by CVE-2025-59842 via jupyterlab (1.2.6)
jupyterlab PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ml-medic-kit =0.1.9, =0.2.1 Source cves: CVE-2025-59842 Source advisory: OSV:GHSA-VVFJ-2JQX-52JM...
WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin WP Directory Kit versions = 1.4.0...
CVE-2025-60120
Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...
CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...
CVE-2025-60120
CVE-2025-60120 : WP Directory Kit plugin for WordPress had a Missing Authorization vulnerability affecting versions up to 1.4.0, enabling exploitation of access-control misconfigurations. The Wordfence entry confirms patch in 1.4.0. Remediation: upgrade to a version >= 1.4.0 (or apply vendor p...
CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...
PT-2025-39567
Name of the Vulnerable Software and Affected Versions WP Directory Kit versions through 1.3.8 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. Recommendations Update WP Directory Kit to a version later than 1.3.8...
WordPress plugin WP Directory Kit has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
MAL-2025-47574 Malicious code in @discord-external/activity-iframe-sdk (npm)
The package @discord-external/activity-iframe-sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4df7af2ceae80fdc052edf95094a378287786ae21cfec9a6104a2af2b1d9b98 This package installs a dependency hosted on a cust...