675 matches found
CLEANSTART-2026-QH72886 Security fixes in ollama-fips 0.19.0-r3
Package ollama-fips version 0.19.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-IB04724 Security fixes in mongodb 7.0.34-r2
Package mongodb version 7.0.34-r2 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-GB17688 Security fixes in postgresql15 15.2-r0
Package postgresql15 version 15.2-r0 fixes 1 vulnerabilities: CVE-2022-41862...
CLEANSTART-2026-NZ79963 Security fixes in calico 3.31.4-r3
Package calico version 3.31.4-r3 fixes 1 vulnerabilities: CVE-2026-42504...
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below -...
Off-by-one Error
Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Off-by-one Error
Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
CVE-2023-25148
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to...
CVE-2021-33688
SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...
CVE-2020-24564
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-59718link is external Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability This type of vulnerability is a frequent atta...
itsourcecode Online Cake Ordering System SQL注入漏洞
itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from an incorrect manipulation of the parameter supplier in the file...
CVE-2022-4982
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...
weblate-5.14.3-1.1 on GA media (moderate)
weblate-5.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15733-1 Rating: moderate Cross-References: CVE-2025-64326 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the weblate-5.14.3-1....
SourceCodester FAQ Bot with AI Assistant 安全漏洞
SourceCodester FAQ Bot with AI Assistant is an open source question and answer bot with artificial intelligence assistant by SourceCodester. A security vulnerability exists in SourceCodester FAQ Bot with AI Assistant v1.0, which stems from improper handling of user-supplied input and could lead t...
SUSE SLES11: libopenssl1-devel / libopenssl1_0_0 / libopenssl1_0_0-32bit / etc (SUSE-SU-2025:03630-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03630-1 advisory. - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232. Tenable has extracted the preceding description block directly fr...
EUVD-2019-5569
Malware in sbrugna...
EUVD-2017-16328
Malware in sbrugna...