1246 matches found
CVE-2025-11625
The CVE-2025-11625 entry concerns wolfSSH (client) versions 1.4.20 and earlier with an improper host authentication flaw that can permit authentication bypass and leakage of client credentials. Multiple sources (NVD, Red Hat, EUVD, OSV, CVE list, CNVD, CIRCL, etc.) describe the issue across wolfS...
CVE-2025-53092 Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installations. By default, Strapi reflects the value of the Origin header back in the Access-Control-Allow-Origin response header without proper...
CVE-2025-62584
Whale browser before 4.33.325.17 allows an attacker to bypass the Same-Origin Policy in a dual-tab environment...
Google Chrome Security Update (stable-channel-update-for-desktop_14-2025-10) - Linux
Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
.NET 8.0 Update - October 14, 2025 (KB5068331)
None None...
F5 Networks BIG-IP : BusyBox vulnerability (K000156994)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000156994 advisory. Heap-based buffer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to have...
PT-2025-41761
Name of the Vulnerable Software and Affected Versions Ericsson Network Manager versions prior to 25.1 GA Description Ericsson Network Manager ENM versions prior to 25.1 GA contain an issue that, if exploited, could lead to an escalation of privilege. Recommendations Update to version 25.1 GA or...
CVE-2025-21066
Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...
CVE-2025-21064
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data...
CVE-2025-10239
In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes...
CVE-2025-61784
LLaMA-Factory's chat API contains SSRF and LFI in the _process_request function (src/llamafactory/api/chat.py). For image_url, video_url, and audio_url, if a URL is not a base64 data URI or local file path, the code fetches the URL with requests.get(url, stream=True).raw without validation, enabl...
EUVD-2021-12400
Malware in sbrugna...
EUVD-2021-18786
Malware in sbrugna...
CVE-2025-50538
Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...
EUVD-2022-42474
Malicious code in bioql PyPI...
EUVD-2023-2939
Malicious code in bioql PyPI...
EUVD-2023-33951
Malicious code in bioql PyPI...
EUVD-2023-0430
Malicious code in bioql PyPI...