Linux Distros Unpatched Vulnerability : CVE-2019-18862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode. CVE-2019-18862 Note that Nessus relies on the...

CVE-2025-55192

creationtimestamp| type| source ---|---|--- 2025-08-14 19:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf2rho26w25...

BIT-LIBPHP-2021-21705 Incorrect URL validation in FILTER_VALIDATE_URL

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filtervar function with FILTERVALIDATEURL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and...

BIT-LIBPYTHON-2022-0391

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator URL strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an...

CVE-2025-4581

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows a pre-authentication blind SSRF vulnerability in the...

Linux Distros Unpatched Vulnerability : CVE-2023-4053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have le...

Foxit Reader Plugin 安全漏洞

Foxit Reader Plugin is a U.S. Foxit company's PDF reading plug-ins. A buffer overflow vulnerability exists in Foxit Reader Plugin version 2.2.1.530, which stems from incorrect handling of URL query strings and can be exploited by an attacker to cause a buffer overflow and arbitrary code execution...

git: Git does not sanitize URLs when asking for credentials interactively

A flaw was found in Git. This vulnerability occurs when Git requests credentials via a terminal prompt, for example, without the use of a credential helper. During this process, Git displays the host name for which the credentials are needed, but any URL-encoded parts are decoded and displayed...

KDE Konsole 安全漏洞

KDE Konsole is a customizable terminal emulator from KDE. A security vulnerability exists in KDE Konsole versions prior to 25.04.2 that stems from improper URL handling and could lead to remote code execution...

AZL-56343 CVE-2025-0938 affecting package python3 for versions less than 3.9.19-10

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

Axios 安全漏洞

Axios is an HTTP client based on Promise a solution for asynchronous programming from the Axios open source. A security vulnerability exists in Axios versions prior to 1.7.8 that stems from isURLSameOrigin.js not using a URL object to determine the origin and contains a potentially unwanted...

Git 安全漏洞

Git is a free, open source distributed version control system open-sourced by Git. Git has a security vulnerability that stems from the fact that any URL-encoded portion can be decoded...

Ping Identity PingAccess 安全漏洞

Ping Identity PingAccess is a centralized access security solution with a comprehensive policy engine from Ping Identity, Inc. It is used to provide secure access to applications and Api's up to the Url level and ensures that only authorized users can access the resources they need. A security...

CLSA-2024-1730920903 haproxy: Fix of CVE-2023-45539

Fix CVE-2023-45539: fix potential information disclosure by not accepting '' as a part of the URI component...

HashiCorp Consul 安全漏洞

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp, USA. The product is used to connect and configure applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul that stems from the use of UR...

CVE-2024-40867

A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iPadOS 18.1. A remote attacker may be able to break out of Web Content sandbox...

ggit 安全漏洞

ggit is a tool by Gleb Bahmutov Personal Developer. A security vulnerability exists in ggit that stems from not cleaning up user input or validating a given URL scheme, leaving it vulnerable to arbitrary parameter injection attacks...

Microchip TimeProvider 4100 安全漏洞

Microchip TimeProvider 4100 is a gateway clock from Microchip, Inc. A security vulnerability exists in Microchip TimeProvider 4100 that originates from a URL redirection to an untrusted site, resulting in a cross-site scripting attack...

wget: Misinterpretation of input may lead to improper behavior

A flaw was found in wget. Incorrect handling of semicolons in the userinfo subcomponent of a URI allows it to be misinterpreted as part of the host subcomponent, potentially exposing user credentials...

Hitachi Energy MicroSCADA X SYS600 安全漏洞

Hitachi Energy MicroSCADA X SYS600 is a SCADA product from Hitachi, Japan. It ensures optimal control and reliable operation of your switching station through seamless integration and connectivity between different devices and systems. A security vulnerability exists in Hitachi Energy MicroSCADA ...