12675 matches found
CVE-2022-27595
An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windo...
PT-2026-1622
Name of the Vulnerable Software and Affected Versions Viitor Button Shortcodes plugin for WordPress versions up to and including 3.0.0 Description The Viitor Button Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting through the link shortcode attribute. Insufficient inp...
PT-2026-2086
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. A Type Confusion issue exists in the CIccProfileXml::ParseBasic function...
PT-2026-1939
Name of the Vulnerable Software and Affected Versions pnpm versions 6.25.0 through 10.26.2 Description pnpm is a package manager susceptible to a Command Injection issue when utilizing environment variable substitution within .npmrc configuration files, specifically with tokenHelper settings...
PT-2026-2070
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A heap buffer overflow exists in the ToneMap parser in versions prior to...
PT-2026-1600
Name of the Vulnerable Software and Affected Versions WP Enable WebP versions up to and including 1.0 Description The WP Enable WebP plugin for WordPress is susceptible to arbitrary file uploads because of inadequate file type validation within the wpse file and ext webp function. This allows...
PT-2026-1295
Name of the Vulnerable Software and Affected Versions Tumult Hype Animations versions through 1.9.11 Description A flaw exists in Tumult Hype Animations that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...
Debian dla-4433 : ruby-rmagick - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4433 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4433-1 [email protected] https://www.debian.org/lts/security/...
Important: amazon-ecr-credential-helper
Issue Overview: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not...
CVE-2026-21437 eopkg vulnerable to package file list integrity bypass
eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...
CVE-2025-69204
CVE-2025-69204 (ImageMagick) : In ImageMagick prior to 7.1.2-12, the WriteSVGImage function used an int to store number_attributes, which caused an integer overflow and a subsequent buffer overflow, enabling a DoS. Affected product/version: ImageMagick before 7.1.2-12. Impact per the description:...
[SECURITY] Fedora 42 Update: gdu-5.32.0-1.fc42
Fast disk usage analyzer with console interface written in Go...
PT-2025-53647
Name of the Vulnerable Software and Affected Versions ZSPACE Z4Pro+ version 1.0.0440024 Description A flaw exists in ZSPACE Z4Pro+ that allows for command injection. The issue is located within the zfilev2 api open function, accessible through the /v2/file/safe/open endpoint of the HTTP POST...
PT-2025-53897
Name of the Vulnerable Software and Affected Versions averta Shortcodes and extra features for Phlox theme auxin-elements versions through 2.17.12 Description An authorization issue exists in averta Shortcodes and extra features for Phlox theme auxin-elements, allowing exploitation due to...
CVE-2025-67450
CVE-2025-67450 affects Eaton UPS Companion software due to insecure library loading in the executable. An attacker with access to the software package could perform arbitrary code execution (Local, High impact). The issue is fixed in the latest Eaton EUC version available from the Eaton download ...
PT-2025-53391
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 32.0 through 37.1 Description Pexip Infinity, in specific configurations of OTJ One Touch Join for Teams SIP Guest Join, exhibits improper input validation within the OTJ service. This flaw allows a remote attacker to...
PT-2025-52569
Name of the Vulnerable Software and Affected Versions WP Affiliate Disclosure versions through 1.2.6 Description A security issue exists in WP Affiliate Disclosure wp-affiliate-disclosure. The details of the issue are not specified. Recommendations Update WP Affiliate Disclosure to a version late...
[SECURITY] Fedora 43 Update: checkpointctl-1.4.1-1.fc43
The checkpointctl command can be used for in-depth analysis of container checkpoints created with Podman and Kubernetes...
[SECURITY] Fedora 43 Update: vips-8.17.3-1.fc43
VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...
