13092 matches found
CGA-QMMH-7PP9-7H68
Bulletin has no description...
CGA-FVW4-HWXQ-JHX7
Bulletin has no description...
CGA-5J4G-3886-7V27
Bulletin has no description...
CGA-4FWW-C4XQ-Q3M5
Bulletin has no description...
CGA-FQJP-GQGV-CHRP
Bulletin has no description...
CGA-72PF-VRM4-5RXH
Bulletin has no description...
CGA-576G-JV9M-GR4C
Bulletin has no description...
CGA-7F4H-7PH7-8W8M
Bulletin has no description...
CGA-5MF4-9QX3-Q7G3
Bulletin has no description...
CGA-G8QQ-FHQ3-2J3R
Bulletin has no description...
Account Takeover
Socialstream is vulnerable to Account Takeover. The vulnerability is due to the lack of a confirmation step when linking social accounts and the potential use of -stateless in the Socialite configuration, which allows an attacker to link a social account to an authenticated user’s account without...
CVE-2025-21613
An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...
GHSA-R9PX-M959-CXF4 vulnerabilities
Vulnerabilities for packages: goreleaser, argocd-image-updater-fips, chezmoi, grafana-alloy-fips, k9s, kaniko-fips, zarf, argo-events-fips, dagger, kyverno, packer, gptscript, timoni, trivy, flux-kustomize-controller, gitea-fips, packer-fips, tekton-pipelines, grype, go-licenses, pulumi, snyk-cli...
CVE-2025-21604 LangChain4j-AIDeepin Using MD5 to Hash files may cause file upload conflicts
LangChain4j-AIDeepin is a Retrieval enhancement generation RAG project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0...
CGA-3QGW-PHCC-2FH2
Bulletin has no description...
CVE-2024-20148
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID:...
CVE-2024-35498
A cross-site scripting XSS vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CGA-Q6F8-VM4G-CH7G
Bulletin has no description...