13092 matches found
GO-2025-3507 Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux
Horcrux Double Sign Possibility in github.com/strangelove-ventures/horcrux...
GO-2025-3504 Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway
Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway...
CGA-HFWH-4G67-Q7CM
Bulletin has no description...
CGA-XVG9-G29C-RR68
Bulletin has no description...
MAL-2025-2225 Malicious code in layouts-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 668d31349d49bb3ffdf31cb641b2829be6ffcae92877d17241a593565a0dddb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PYSEC-2025-22
A vulnerability, that could result in Remote Code Execution RCE, has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting t...
RHSA-2025:2480 Red Hat Security Advisory: firefox security update
Bulletin has no description...
BIT-GITLAB-2025-1540 Incorrect Authorization in GitLab
An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."...
ALSA-2025:2500 Important: tigervnc security update
Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...
CVE-2025-27519
Cognita is a RAG Retrieval Augmented Generation Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setu...
CVE-2025-20921
Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...
BELL-CVE-2024-58071
Bulletin has no description...
BELL-CVE-2025-21836
Bulletin has no description...
BELL-CVE-2025-21832
Bulletin has no description...
CVE-2024-12837
CVE-2024-12837 is an Imagination Technologies PowerVR-GPU–related vulnerability where an unprivileged user can issue improper GPU system calls, potentially corrupting kernel heap memory via local access. Public sources describe this as a local escalation/impact to kernel memory integrity and conf...
BELL-CVE-2025-21830
Bulletin has no description...
BELL-CVE-2024-58076
Bulletin has no description...
BELL-CVE-2025-21829
Bulletin has no description...