655 matches found
CVE-2024-57256
A flaw was found in Das U-Boot. This vulnerability allows an attacker to cause a memory overwrite via a crafted ext4 filesystem with an inode size of 0xffffffff, which can lead to code execution or system crash. Mitigation Mitigation for this issue is either not available or the currently availab...
CGA-JRMW-JF8X-M44P
Bulletin has no description...
CVE-2025-25194 Server-Side Request Forgery (SSRF) in activitypub_federation
Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypubfederation, a framework for ActivityPub federation in Rust. This vulnerability, which is present in versions 0.6.2 and prior of activitypubfederation and versions 0.19...
Azure Linux 3.0 Security Update: socat (CVE-2024-54661)
The version of socat installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54661 advisory. - readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. CVE-2024-54661 Note that Nessus has...
PT-2025-5954 · Infusionsoft · Infusionsoft Analytics
Name of the Vulnerable Software and Affected Versions: Infusionsoft Analytics versions n/a through 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions n/a through 2.0, update to a version that includes a fix...
PT-2025-5912 · WordPress · Easy Wp Tiles
Name of the Vulnerable Software and Affected Versions: Easy WP Tiles versions n/a through 1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...
CGA-W337-WP74-P3CM
Bulletin has no description...
CVE-2025-23636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...
PT-2025-5132 · Unknown · Notfound Legal
Name of the Vulnerable Software and Affected Versions: NotFound Legal + versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This enables attackers to inject malicious script...
PT-2025-5623 · Suitecrm · Suitecrm
Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.12.7 Description: A high severity issue in SuiteCRM allows authenticated users to recover arbitrary database fields. There is no information available about the estimated number of potentially affected devices or real-world...
PT-2025-5180 · Ivo Brett · Applymetrics Apply With Linkedin Buttons
Name of the Vulnerable Software and Affected Versions: Ivo Brett – ApplyMetrics Apply with LinkedIn buttons versions n/a through 2.3 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for DOM-Based XS...
PT-2025-1098 · Microsoft · Windows Virtual Trusted Platform Module +1
Name of the Vulnerable Software and Affected Versions: Windows Virtual Trusted Platform Module affected versions not specified Description: The issue is related to insufficient input validation in the Windows Virtual Trusted Platform Module, which can be exploited to cause a denial of service. Th...
PT-2025-4458 · Unknown · Convoy Media Category Library
Name of the Vulnerable Software and Affected Versions: Convoy Media Category Library versions n/a through 2.7 Description: The issue affects Convoy Media Category Library, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site...
CVE-2017-6838 affecting package audiofile 0.3.6-27
CVE-2017-6838 affecting package audiofile 0.3.6-27. No patch is available currently...
CVE-2017-6830 affecting package audiofile 0.3.6-27
CVE-2017-6830 affecting package audiofile 0.3.6-27. No patch is available currently...
CVE-1999-0965 affecting package xterm 380-1
CVE-1999-0965 affecting package xterm 380-1. This CVE either no longer is or was never applicable...
CVE-2022-4904 affecting package rubygem-mini_portile2 2.8.0-1
CVE-2022-4904 affecting package rubygem-miniportile2 2.8.0-1. This CVE either no longer is or was never applicable...
CVE-2022-3114 affecting package kernel 5.15.202.1-1
CVE-2022-3114 affecting package kernel 5.15.202.1-1. This CVE either no longer is or was never applicable...