Lucene search
+L

7263 matches found

OSV
OSV
added 2025/12/16 12:00 a.m.6 views

ALSA-2025:23295 Moderate: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For...

4.3CVSS6.8AI score0.00413EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/16 12:00 a.m.7 views

ALSA-2025:23294 Moderate: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues,...

4.3CVSS6.9AI score0.00413EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2025/12/16 12:00 a.m.11 views

Moderate: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For...

4.3CVSS6.9AI score0.00413EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2025/12/16 12:00 a.m.8 views

Moderate: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues,...

4.3CVSS7.1AI score0.00413EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/15 12:00 a.m.7 views

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2025:20157-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20157-1 advisory. Update to go1.25.5. Security issues fixed: - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host...

7.5CVSS7.8AI score0.00617EPSS
SaveExploits2References45
Tenable Nessus
Tenable Nessus
added 2025/12/15 12:00 a.m.2 views

AlmaLinux 9 : grafana (ALSA-2025:23087)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:23087 advisory. golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 Tenable has extracted the preceding description block directly from the...

4.3CVSS7.7AI score0.00413EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/13 9:11 a.m.10 views

RLSA-2025:23088 Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: archive/tar: Unbounded allocation when parsing GNU sparse map CVE-2025-58183 For more details about the security issues, including the impact, a CVSS score,...

7.5CVSS8.5AI score0.00413EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2025/12/13 9:06 a.m.12 views

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

7.8CVSS5.2AI score0.00154EPSS
SaveExploits0
Veracode
Veracode
added 2025/12/13 7:32 a.m.24 views

Remote Code Execution (RCE)

vLLM is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe dynamic loading and execution of classes from remote repositories via the automap configuration, which allows an attacker to execute arbitrary code even when trustremotecode is disabled...

8.8CVSS7.2AI score0.0067EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/13 3:59 a.m.8 views

CVE-2025-13846

The Easy Map Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS5AI score0.00265EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/13 12:00 a.m.6 views

RockyLinux 8 : kernel-rt (RLSA-2025:22800)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:22800 advisory. kernel: mm: kmem: fix a NULL pointer dereference in objstockflushrequired CVE-2023-53401 kernel: RDMA/rxe: Fix incomplete state save in rxerequester...

7.8CVSS7.1AI score0.00154EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/12/12 8:15 p.m.8 views

CVE-2025-14534

A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched remotely. The exploit has bee...

10CVSS6.9AI score0.05721EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/12 7:45 a.m.13 views

OPENSUSE-SU-2025:20158-1 Security update for go1.24

This update for go1.24 fixes the following issues: Update to go1.24.11. Security issues fixed: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames bsc1251257. - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU sparse map bsc1251261. - CVE-2025-58185:...

7.5CVSS5.8AI score0.00617EPSS
SaveExploits2References29
EUVD
EUVD
added 2025/12/12 6:31 a.m.10 views

EUVD-2025-202991

The Easy Map Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS4.7AI score0.00265EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/12 6:31 a.m.13 views

EUVD-2025-202959

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS4.6AI score0.00211EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/12 4:15 a.m.24 views

CVE-2025-13850

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00211EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 3:21 a.m.41 views

CVE-2025-13850 LS Google Map Router <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00211EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/12 3:21 a.m.6 views

CVE-2025-13850 LS Google Map Router <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The LS Google Map Router plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'maptype' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS4.7AI score0.00211EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/12 3:21 a.m.22 views

CVE-2025-13850

CVE-2025-13850 affects LS Google Map Router for WordPress. It is a Stored Cross-Site Scripting vulnerability via the map_type parameter in all versions up to 1.1.0 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at Contributor level or higher...

6.4CVSS4.7AI score0.00211EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/12 3:20 a.m.40 views

CVE-2025-13846 Easy Map Creator <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Easy Map Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acces...

6.4CVSS0.00265EPSS
SaveExploits0References3
Rows per page
Query Builder