13092 matches found
Security Bulletin: spring-web-5.3.30.jar may affect SPSS Collaboration and Deployment Services (CVE-2024-22259)
Summary spring-web-5.3.30.jar may affect SPSS Collaboration and Deployment Services CVE-2024-22259 Vulnerability Details CVEID:CVE-2024-22262 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in...
CVE-2024-37109
Improper Control of Generation of Code 'Code Injection' vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7...
CVE-2024-31244
Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...
ALSA-2025:1068 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps CVE-2024-50275 For more details about the...
CVE-2024-48026
Deserialization of Untrusted Data vulnerability in GMRobbins Disc Golf Manager disc-golf-manager allows Object Injection.This issue affects Disc Golf Manager: from n/a through = 1.0.0...
CVE-2025-0445
Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CGA-G9H5-GX89-C9V8
Bulletin has no description...
CVE-2025-1014
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability affects Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...
RHSA-2025:0885 Red Hat Security Advisory: rsync security update
Bulletin has no description...
CGA-MQ9V-F9RV-HMV4
Bulletin has no description...
CGA-39XG-7MMG-Q96G
Bulletin has no description...
openSUSE Security Advisory (SUSE-SU-2025:0327-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-22129
Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has been addressed in Tuleap Community Edition 16.3.99.1736242932, Tuleap Enterprise Edition 16.2-5, an...
CGA-JV33-3G3V-3FFM
Bulletin has no description...
MAL-2025-1211 Malicious code in continue-docs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4758de25ad99ec1a3c7b2bc7bfe0e9657ccef34aa389e3f39db67720e64b3705 Any computer that has this package installed or running should be considered...
MAL-2025-1044 Malicious code in minikit-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-1019 Malicious code in apple-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...
MAL-2025-997 Malicious code in tonvia (PyPI)
--- -= Per source details. Do not edit below this line.=-...