11651 matches found
The vulnerability of the vorbis_analysis_wrote() function in the libsndfile library for reading and writing audio files allows a hacker to execute arbitrary code.
The vulnerability of the vorbisanalysiswrote function in the libsndfile library, a library for reading and writing audio files, is related to reading values outside of the allowed range. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...
The vulnerability of the sanity_check inode() function in the f2fs component of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the sanitycheck inode function in the f2fs component of the Linux operating system is related to errors in reading values that exceed the acceptable range. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2025-2600
Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use the ELEVATEDPASSWORD variable even though not allowed by the "Allow password in variable policy". This issue affects Remote Desktop Manager versions from 2025.1.24...
@clevercanyon/madrun (>=1.0.0, <=1.0.1), @snyk/snyk-cocoapods-plugin (2.6.0) +8 more potentially affected by CVE-2025-30222 via shescape (>=1.7.4, <=2.1.0)
shescape NPM version =1.7.4, =1.0.0, =0.1.2, =1.0.0, =1.0.0, =1.5.1, =6.5.0, =0.0.0-experimental-20221114-610843f6, =0.34.0-experimental.c2191de Source cves: CVE-2025-30222 Source advisory: OSV:GHSA-66PP-5P9W-Q87J...
CVE-2025-30540
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in avaibook AvaiBook avaibook allows Stored XSS.This issue affects AvaiBook: from n/a through = 1.2...
SUSE-SU-2025:1027-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-2201: Fixed information leak in x86/BHI bsc1217339. - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers bsc1228483. -...
Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect
Summary There are multiple vulnerabilities in Open Source packages that affect IBM Storage Defender – Data Protect. These vulnerabilities can result in runtime errors, denial of service, remote code execution, arbitrary command execution, bypass of security restrictions, incorrect file permission...
kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range
A vulnerability was found in the netfilter subsystem of the Linux kernel, specifically in the nfconntrackh323 module. This issue involves inadequate protection for BMP length values, potentially leading to out-of-range conditions...
Directus 安全漏洞
Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 9.22.0 through 11.5.0 that stems from a large number of HEAD requests that could result in unavailable assets...
Directus 信息泄露漏洞
Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. An information disclosure vulnerability exists in Directus versions prior to 9.0.0-alpha.4 through 11.5.0, which stems from the search parameter that can lead to unauthorized...
PT-2025-12984 · Directus · Directus
Name of the Vulnerable Software and Affected Versions: Directus versions 9.12.0 through 11.4.0 Description: Directus is a real-time API and App dashboard for managing SQL database content. When a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a...
Exploit for CVE-2025-1974
README Talk is cheap, just look at the code. Detailed can be...
PT-2025-16730
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc5+ Description A vulnerability in the Linux kernel has been resolved, related to the handling of VM PAT when fork fails in copy page range. If track pfn copy fails, the dst VMA is added to the maple tree...
PT-2025-12815 · Ibm · Ibm Spss Statistics
Name of the Vulnerable Software and Affected Versions: IBM SPSS Statistics versions 26.0 through 29.0.2 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For versions 26...
WordPress plugin EZ SQL Reports Shortcode Widget and DB Backup 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Next.js 13.0.x < 13.5.9 Authorization Bypass
The version of Next.js installed on the remote host is 11.1.4 prior to 12.3.5, 13.0.x prior to 13.5.9, 14.x prior to 14.2.25 or 15.x prior to 15.2.3. It is, therefore, affected by Authorization Bypass if the authorization check occurs in middleware. Note that the scanner has not attempted to...
AZL-59189 CVE-2025-30472 affecting package corosync 3.0.4-3
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orftokenendianconvert in exec/totemsrp.c via a large UDP packet...
123-x-ed-eied (>=1.0.5, <=1.0.6), @0xdeepak/wallets (0.0.2) +617 more potentially affected by CVE-2025-29927 via next (>=12.0.0, <=12.3.4)
next NPM version =12.0.0, =1.0.5, =1.0.0, =1.1.1, =0.0.2-beta.0, =0.0.2-beta.0, =0.0.7, =0.0.0, =1.2.4, =3.6.2, =3.6.13 and more Source cves: CVE-2025-29927 Source advisory: OSV:GHSA-F82V-JWR5-MFFW...
OESA-2025-1318 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Zap all roots when unmapping gfn range in TDP MMU Zap both valid and invalid roots when zapping/unmapping a gfn range, as KVM must ensure it holds ...