CVE-2025-3496: Buffer Copy without Checking Size of Input

An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluetooth or RS-232 interface...

CVE-2025-46717: Exposure of Sensitive System Information to an Unauthorized Control Sphere

sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no or very limited sudo privileges can determine whether files exists in folders that they otherwise cannot access using sudo --list . Users with local access to a machine can discover the...

CVE-2025-4432 vulnerabilities

Vulnerabilities for packages: kdash, ntpd-rs, wash, sccache, sqlx, wadm, deno, wasm-pack, zizmor, lychee, uv, shadowsocks-rust, atuin, linkerd2-proxy, tealdeer, oranda, nushell, pixi, rye, qdrant, wasmtime, cargo-audit, linkerd-extension-init, zed, sdp-k8s-injector, buck2, rustup, zola, parseable...

GHSA-C86P-W88R-QVQR vulnerabilities

Vulnerabilities for packages: sqlx, oranda, lychee, kdash, xh, rye, ntpd-rs, samply, wasmtime, cargo-audit, wash, sccache, buck2, zola...

CVE-2025-47679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows DOM-Based XSS.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-47679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows DOM-Based XSS.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-47679 WordPress RS WP Book Showcase plugin <= 6.7.59 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows DOM-Based XSS.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-47679

CVE-2025-47679 affects RS WP Book Showcase (WordPress plugin) up to version 6.7.40. The issue is described as an improper neutralization of input during web page generation, resulting in a DOM-based XSS vulnerability. The initial entry lists a CVSS v3.1 base score of 6.5 (Medium) with network att...

CVE-2025-47679 WordPress RS WP Book Showcase <= 6.7.40 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase allows DOM-Based XSS. This issue affects RS WP Book Showcase: from n/a through 6.7.40...

PT-2025-20223 · WordPress · Rs Wp Book Showcase

Name of the Vulnerable Software and Affected Versions: RS WP Book Showcase versions through 6.7.40 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker can inje...

CVE-2025-47679: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows DOM-Based XSS.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

[SECURITY] Fedora 41 Update: kappanhang-0-0.3.20250427gitdffb773.fc41

Remotely open audio channels and a serial port to an Icom RS-BA1 server for ex. Icom IC-705 transceiver...

Fedora: Security Advisory (FEDORA-2025-66b73d6c72)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: ntpd-rs-1.5.0-1.fc42

Full-featured implementation of NTP with NTS support...

[SECURITY] Fedora 41 Update: ntpd-rs-1.5.0-1.fc41

Full-featured implementation of NTP with NTS support...

Fedora 41 : ntpd-rs (2025-e9be11b9ba)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e9be11b9ba advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

Fedora 40 : ntpd-rs (2025-66b73d6c72)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-66b73d6c72 advisory. Update to version 1.5.0 for now, without PPS feature enabled due to potential correctness issues in the code. Release notes:...

PT-2025-62915

hugepage rs::dealloc was a publicly accessible safe function. It accepted an arbitrary raw pointer and Layout, then forwarded them to the hugepage allocator's GlobalAlloc::dealloc implementation. GlobalAlloc::dealloc requires callers to ensure that the pointer denotes a block of memory currently...

CVE-2025-26745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...

CVE-2025-26745

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSTheme RS Elements Elementor Addon rselements-lite allows Stored XSS.This issue affects RS Elements Elementor Addon: from n/a through = 1.1.5...