13092 matches found
CGA-77FH-PX8C-24H3
Bulletin has no description...
CGA-FPV8-W263-26V5
Bulletin has no description...
CGA-6842-9V92-93C5
Bulletin has no description...
CVE-2025-26493
In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...
CVE-2025-1247 vulnerabilities
Vulnerabilities for packages: keycloak...
MAL-2025-3015 Malicious code in watchitoring (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0b2a1b7442e643963d1f4aa3fe8696741f7ed248d39effb173f8d77e37690066 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
MAL-2025-2931 Malicious code in aiosignalasync (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5f77ce31a234eb422ebfaa8182ea066bd7c10c154bfefb76757b0c06bbd3e655 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
MAL-2025-2937 Malicious code in asyncaiosignal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8c9a16c81ad4cb5cef1907d6b9e4b5b352d53a6918e702610b428a455e799a2f Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
RHSA-2025:1352 Red Hat Security Advisory: krb5 security update
Bulletin has no description...
CVE-2025-1198 Insufficient Session Expiration in GitLab
An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results...
SUSE: Security Advisory (SUSE-SU-2024:3251-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-54951
Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...
CGA-RJFF-7JCH-VW6J
Bulletin has no description...
CGA-92RH-G2JC-P3WF
Bulletin has no description...
GHSA-29C6-3HCJ-89CF go-crypto-winnative BCryptGenerateSymmetricKey memory leak
Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...
GHSA-7G2V-JJ9Q-G3RG vulnerabilities
Vulnerabilities for packages: ruby3.3-rack, ruby3.2-rails, ruby3.4-rails, ruby3.2-rack, logstash, ruby4.0-rack, ruby3.3-rails, kube-fluentd-operator, ruby3.4-rack...
CGA-3487-J7M3-R87P
Bulletin has no description...
CVE-2024-10334
A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue affects System 800xA: 5.1.X; System 800xA:...
CVE-2025-0516 Incorrect Authorization in GitLab
Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...