57 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-45480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. CVE-2025-45480 Note that Nessus relies ...
CVE-2025-45480
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
CVE-2025-45480
Floodlight (SDN controller) at commit 71fe8a7 contains a vulnerability where a port is misclassified as a non-boundary , enabling disruption of host communication via link spoofing . The CVSS 3.1 score is 3.0 (LOW) with an adjacent network attack vector, high complexity, and low privileges requir...
CVE-2025-45480
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
EUVD-2025-210893
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
PT-2026-90943
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
CVE-2025-45480: Incorrect Resource Transfer Between Spheres
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
CVE-2025-45480
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...
CVE-2026-15812
CVE-2026-15812 affects kronosnet (
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
CVE-2026-15812
A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...
Linux Distros Unpatched Vulnerability : CVE-2026-15812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured t...
EUVD-2026-44348
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse passes Unicode explicit-direction BiDi formatting characters through into sanitized href and src attributes, allowing sanitized...
CVE-2026-45064 Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse passes Unicode explicit-direction BiDi formatting characters through into sanitized href and src attributes, allowing sanitized...
CVE-2026-45064 Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse passes Unicode explicit-direction BiDi formatting characters through into sanitized href and src attributes, allowing sanitized...
EUVD-2013-0548
Malware in sbrugna...
EUVD-2023-58018
Malicious code in bioql PyPI...
CVE-2025-41421 Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...
CVE-2025-41421 Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client
Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update fi...