20286 matches found
CVE-2025-5994
A cache poisoning flaw was found in Unbound. Resolvers supporting EDNS Client Subnet ECS must segregate outgoing queries to accommodate different outgoing ECS information. This issue reopens resolvers to a birthday paradox attack, known as the Rebirthday Attack, which attempts to match the DNS...
CVE-2025-40923
A random session id generation flaw has been discovered in Plack-Middleware-Session. By default, session ids are generated by a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed if it is...
DRUPAL-CONTRIB-2025-090
This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently validate the provided attributes, which makes it possible to insert JavaScript event attributes such as onmouseover,...
CVE-2024-6234
A flaw was found in the Ansible Automation Platform. The Event-Driven Ansible server exposes the WebSocket JSON web token JWT when running Rulebook activations in debug mode, which, if obtained by an attacker, can be used to connect to the socket and issue commands that return Playbook content or...
RHSA-2025:11245 Red Hat Security Advisory: kernel security update
Bulletin has no description...
Exploit for Code Injection in Craftcms Craft_Cms
🧨 CVE-2025-32432 – Craft CMS Pre-auth RCE 🧨 🕵️ Overview...
CVE-2025-7700
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...
CVE-2025-50098
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server...
CVE-2025-50096
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with log-on access to the infrastructure where MySQL Server runs to cause a crash in the MySQL server...
CVE-2025-50102
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server...
CVE-2025-53906
A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. Mitigation Mitigation for this issue is either not available or the currentl...
CVE-2025-53905
A path traversal flaw was found in Vim. Successful exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. Mitigation Mitigation for this issue is either not available or the currentl...
CVE-2025-50092
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server...
CVE-2025-7656
An integer overflow flaw was found in Chromium. This vulnerability allows a remote attacker to cause heap corruption via a crafted HTML page, potentially leading to unpredictable behavior, such as system crashes and the execution of malicious code. Mitigation Mitigation for this issue is either n...
CVE-2025-7657
Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High Mitigation Mitigation for this issue is either not available or the currently available options do not meet...
CVE-2025-53031
...
CVE-2025-53029
...
CVE-2025-53027
CVE-2025-53027 affects Oracle VM VirtualBox 7.1.10 (Core). Local attacker with logon can compromise Oracle VM VirtualBox; high impact to confidentiality, integrity and availability (CVSS v3.1 base 8.2). Root cause described as an issue in VirtualBox Core; exploitation details are not provided in ...
CVE-2025-50081
CVE-2025-50081 affects Oracle MySQL Client: mysqldump. Affected versions include 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protocols; exploitation requires user interaction. Impact is limited to confid...