13092 matches found
CGA-2M39-42QR-F536
Bulletin has no description...
MAL-2025-225 Malicious code in prem-facebook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fae3f4928f0aa25d9e3fc7f0d663dac3d73cb5559dff553dbfa12156c135f173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-166 Malicious code in bbm-enterprise (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adff756b9b1415f9a70c8273fea0bc9454bc3b33abb4efb2778559d480cdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-136 Malicious code in @moneyguide-devkit/style-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...
CVE-2024-57911 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iiosimplydummybuffer: fix information leak in triggered buffer The 'data' array is allocated via kmalloc and it is used to push data to user space from a triggered buffer, but it does not set values for inactive...
CGA-7QFC-JC9P-WV4Q
Bulletin has no description...
CVE-2021-0447
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CGA-376V-X6MM-4383
Bulletin has no description...
BELL-CVE-2024-57889
Bulletin has no description...
CVE-2024-57030
Wegia 3.2.0 is vulnerable to Cross Site Scripting XSS in /geral/documentosfuncionario.php via the id parameter...
GO-2025-3393 Mattermost Incorrect Type Conversion or Cast in github.com/mattermost/mattermost-server
Mattermost Incorrect Type Conversion or Cast in github.com/mattermost/mattermost-server...
CVE-2025-23430
CVE-2025-23430 is a CSRF and XSS issue in Mass Custom Fields Manager for WordPress. Red Hat (RH:CVE-2025-23430) and Red Hat/Wordfence references confirm a CSRF-to-Reflected XSS condition affecting Mass Custom Fields Manager versions up to 1.5. The CVSS 3.1 base score is 7.1 (High) with network ac...
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...
CVE-2024-57775
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid...
CGA-PH6G-3PH2-3H3Q
Bulletin has no description...
BELL-CVE-2024-57895
Bulletin has no description...
BELL-CVE-2024-57882
Bulletin has no description...
BELL-CVE-2024-57885
Bulletin has no description...