2902 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-1000481
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'camefrom' parameter set to the previous url. After you login...
Linux Distros Unpatched Vulnerability : CVE-2014-9816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a crafted viff file. CVE-2014-9816 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2021-26291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Maven will follow repositories that are defined in a dependency's Project Object Model pom which may be surprising to some users, resulting in potential...
USN-7317-1: wpa_supplicant and hostapd vulnerabilities
George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpasupplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information. CVE-2022-37660 Daniel De Almeida Braga...
GO-2025-3476 Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk
Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk...
CVE-2025-0555
Removed by vendor...
MAL-2025-2007 Malicious code in useragents (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1930 Malicious code in sdk-coin-eos (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1854 Malicious code in instacart-api-client (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1836 Malicious code in iberia-event (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1835 Malicious code in iberia-db (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1796 Malicious code in epicagames-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1766 Malicious code in coinbase-jira (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1753 Malicious code in calypso-stripe (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1732 Malicious code in apple-model (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1728 Malicious code in apple-analytics (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1712 Malicious code in airbnb-gateway (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1694 Malicious code in @mp-food/knapsack (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1693 Malicious code in @monkey-tilt/client (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances...