210755 matches found
ROOT-OS-DEBIAN-11-CVE-2025-38393 CVE-2025-38393 in linux - Patched by Root
Root has patched CVE-2025-38393 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2021-47193 CVE-2021-47193 in linux - Patched by Root
Root has patched CVE-2021-47193 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-23261 CVE-2026-23261 in linux - Patched by Root
Root has patched CVE-2026-23261 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-23351 CVE-2026-23351 in linux - Patched by Root
Root has patched CVE-2026-23351 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-41014 CVE-2024-41014 in linux - Patched by Root
Root has patched CVE-2024-41014 in the linux package for Root:Debian:11. Multiple fixed versions available...
CGA-GH9J-5H6H-JQ6X
Bulletin has no description...
CGA-9VCC-MQ55-9MMM
Bulletin has no description...
WordPress Media Library Assistant <= 3.34 - SQL Injection
David Lingren Media Library Assistant = 3.34 contains an sql injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires crafted input. id: CVE-2026-34885 info: name: WordPress Media Library Assistant = 3.34 -...
Oliver 5 Library Server <8.00.008.053 - Local File Inclusion
Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...
Slims9 Bulian 9.4.2 - SQL Injection
Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. id: CVE-2021-45793 info: name: Slims9 Bulian 9.4.2 - SQL Injection author: nblirwn severity: high description: | Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data c...
MicroStrategy Library <11.1.3 - Cross-Site Scripting
MicroStrategy Library before 11.1.3 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
Php-mod/curl Library <2.3.2 - Cross-Site Scripting
Php-mod/curl library before 2.3.2 contains a cross-site scripting vulnerability via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php. An attacker can inject arbitrary script, which can allow theft of cookie-based authentication credentials and launch of other...
SAS/Internet 9.4 1520 - Local File Inclusion
SAS/Internet 9.4 build 1520 and earlier allows local file inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...
Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion
Media Library Assistant plugin for WordPress before 2.82 contains a local file inclusion caused by unsanitized mlagallery link parameter, letting attackers include arbitrary local files, exploit requires access to the vulnerable link. id: CVE-2020-11732 info: name: Media Library Assistant 2.82 -...
MAL-2026-12078 Malicious code in trezor-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ba5806b927aefbdd505acb44fb77a23bb71570d27d1ba17ec7642dcf17383 [email protected] is a Trezor-lookalike npm package whose index.js, on first require, harvests installer-side secrets and posts them to a hardcoded...
Malicious code in trezor-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ba5806b927aefbdd505acb44fb77a23bb71570d27d1ba17ec7642dcf17383 [email protected] is a Trezor-lookalike npm package whose index.js, on first require, harvests installer-side secrets and posts them to a hardcoded...
Malicious code in ledger-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440db517e7261bf345aa374ab2afb8d91698929115a8d3d67abd9fbf7018362e The npm package [email protected] presents itself as a Ledger hardware wallet library but ships no wallet functionality index.js is empty. Its...
CGA-8985-4VGP-GR5V
Bulletin has no description...