20083 matches found
Reviewdog 安全漏洞
Reviewdog is an open source automated code review tool from Reviewdog. A security vulnerability exists in Reviewdog that stems from malicious code that could leak exposed keys...
CVE-2025-29790 Contao allows cross-site scripting through SVG uploads
Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6...
MongoDB Server 安全漏洞
MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server that stems from a buffer overflow that could...
GLPI SQL注入漏洞
GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
Linux kernel improper locking vulnerability (CNVD-2025-05316)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an improper locking vulnerability that stems from the use of spinlock in an interruptible context, which could lead to a deadlock. The vulnerability c...
grafana security update
An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...
samba bug fix update
An update is available for samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...
[SECURITY] Fedora 42 Update: chromium-134.0.6998.88-3.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
Code-Projects Online Class and Exam Scheduling System 注入漏洞
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. An injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an incorrect manipulation of the parameter i...
Expr 安全漏洞
Expr is an expression language and expression evaluation for Go open-sourced by Expr. A security vulnerability exists in versions of Expr prior to 1.17.0, which stems from an unlimited input size that could lead to memory exhaustion...
ALSA-2025:2868 Important: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
Code-Projects Blood Bank Management System 安全漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from an SQL injection...
Code-Projects Blood Bank Management System 注入漏洞
Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from an SQL injection...
Agate 跨站脚本漏洞
Agate is an Open Source Software for Epidemiology open source a user ID provider for OBiBa. A cross-site scripting vulnerability exists in Agate versions prior to 3.3.0 that stems from HTML injection and could lead to phishing attacks...
Square Wire 安全漏洞
Square Wire is an open source protocol buffer processing library open-sourced by Square in the United States, mainly used for efficient data serialization and deserialization. A security vulnerability exists in Square Wire versions prior to 5.2.0, which stems from not enforcing a recursion...
CVE-2025-27103
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass for the patch for CVE-2024-55953 allows authenticated users to read and deserialize arbitrary files through the background JDBC connection. The vulnerability has been fixed in v2.10.6. ...
[SECURITY] Fedora 40 Update: chromium-134.0.6998.88-1.fc40
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: chromium-134.0.6998.88-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...