14168 matches found
CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-34521
A reflected cross-site scripting XSS vulnerability exists in the web interface of the Arcserve Unified Data Protection UDP, where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by...
Linux Distros Unpatched Vulnerability : CVE-2022-42906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerline-gitstatus aka Powerline Gitstatus before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes...
Malicious code in @callcenter-frontend/shared-types (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...
MAL-2025-41828 Malicious code in @callcenter-frontend/shared-types (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...
IBM Storage Virtualize Privilege Escalation
The vulnerability of the software for IBM Storage Virtualize storage systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
Malicious code in network-console-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41584 Malicious code in network-console-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-34521
A reflected cross-site scripting XSS vulnerability exists in the web interface of the Arcserve Unified Data Protection UDP, where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by...
CVE-2025-34521 Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS)
A reflected cross-site scripting XSS vulnerability exists in the web interface of the Arcserve Unified Data Protection UDP, where unsanitized user input is improperly reflected in HTTP responses. This flaw allows remote attackers with low privileges to craft malicious links that, when visited by...
kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte In MCOPYATOMICCONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepageaddnewanonrmap is called for them mistakenly...
kernel: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte In MCOPYATOMICCONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepageaddnewanonrmap is called for them mistakenly...
Linux Distros Unpatched Vulnerability : CVE-2025-30167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared...
CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-26417
In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2025-26417
Google Android is affected by an information disclosure vulnerability caused by a confused deputy issue in the checkWhetherCallingAppHasAccess function of DownloadProvider.java . This flaw allows for a possible bypass of user consent when opening files in shared storage, potentially leading to th...
ROS-20250826-08
Apache Tomcat application server vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker acting remotely to cause a denial of service. Apache Tomcat application server vulnerability is related to integer overflow. Exploitation exploitation ...
Linux Distros Unpatched Vulnerability : CVE-2024-48877
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility version 0.95. A specially crafted malformed...
PT-2025-37979
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the hws action get shared stc nic function within the net/mlx5 module of the Linux kernel. This occurs when an invalid stc type is provided, leading to memory...