2042 matches found
CVE-2025-11925
Incorrect Content-Type header in one of the APIs text/html instead of application/json replies may potentially allow injection of HTML/JavaScript into reply.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-11832 APIs Lack Rate Limiting
Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Technology BLU-IC2, Azure Access Technology BLU-IC4 allows Flooding.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞
The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. A security vulnerability exists in Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 that stems from unrestricted resource allocation ...
KB5066586: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2025)
The remote Windows host is missing security update 5066586. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
CVE-2025-61689
HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...
Fedora 42 : prometheus-podman-exporter (2025-b4003be6a2)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4003be6a2 advisory. release v1.19.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
happy-dom 代码注入漏洞
happy-dom is a JavaScript implementation of a web browser without a graphical user interface by the individual developer David Ortner. A code injection vulnerability exists in happy-dom version 19 and earlier, which stems from insufficient isolation of the Node.js VM Context environment and could...
Mageia: Security Advisory (MGASA-2025-0236)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414365 advisory. drivers/usb/mon/monbin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user- space client to corrupt the monitor's internal memory...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414378 advisory. An issue was discovered in the Linux kernel before 5.19. In pxa3xxgcuwrite in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of sizet vers...
EUVD-2025-25895
Malicious code in bioql PyPI...
EUVD-2025-24952
Malicious code in bioql PyPI...
EUVD-2025-29772
Malicious code in bioql PyPI...
EUVD-2025-24809
Malicious code in bioql PyPI...
EUVD-2025-24481
Malicious code in bioql PyPI...
EUVD-2025-24953
Malicious code in bioql PyPI...
EUVD-2025-29135
Malicious code in bioql PyPI...
EUVD-2025-24950
Malicious code in bioql PyPI...
Volto 代码问题漏洞
Volto is a content management system open-sourced by the Plone Foundation. A code issue vulnerability exists in Volto versions 16.34.0 and earlier, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, which stems from the fact that accessing a specific URL by...
laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...