13088 matches found
GO-2025-3767 OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr
OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr...
GO-2025-3796 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2025-3758 Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad
Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad...
GO-2025-3773 Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg
Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg...
GO-2025-3811 File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser
File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser...
GO-2025-3781 Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus
Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus...
CGA-QF7C-6346-2GF6
Bulletin has no description...
MAL-2025-6738 Malicious code in nio4r (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6780 Malicious code in wbcm (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6766 Malicious code in tdesign-flutter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6763 Malicious code in spot-tasks (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6743 Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6771 Malicious code in tidb-lightning-web (npm)
The package communicates with a domain associated with malicious activity...
CGA-GXCJ-JJ66-MXG7
Bulletin has no description...
CGA-6744-388X-QM8Q
Bulletin has no description...
MINI-RF5G-R7W9-RJ8R
Bulletin has no description...
MINI-GGWF-XC87-JQ5V
Bulletin has no description...
CVE-2025-6918 SQLi in Ncvav's Virtual PBX Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025...