17029 matches found
CVE-2024-25177
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...
PT-2025-28175 · Jobcenter · Jobcenter
Name of the Vulnerable Software and Affected Versions: JobCenter versions through 7e7b0b2 Description: The issue allows for account takeover via the password reset feature. This is because the SERVER NAME is not configured, causing the password reset to depend on the Host HTTP header...
PT-2025-28147 · Unknown · Gavias Halpes
Name of the Vulnerable Software and Affected Versions: Gavias Halpes versions prior to 1.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-28181 · Mediawiki · Mediawiki Quiz Extension
Name of the Vulnerable Software and Affected Versions: Mediawiki - Quiz Extension versions 1.39.X through 1.39.12 Mediawiki - Quiz Extension versions 1.42.X through 1.42.6 Mediawiki - Quiz Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Inp...
CVE-2025-47479
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...
OSV-2025-525 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429429085 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...
BELL-CVE-2025-38192
Bulletin has no description...
BELL-CVE-2025-38177
Bulletin has no description...
BELL-CVE-2025-38204
Bulletin has no description...
BELL-CVE-2025-38201
Bulletin has no description...
BELL-CVE-2025-38180
Bulletin has no description...
BELL-CVE-2025-38191
Bulletin has no description...
Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header
The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...
CVE-2025-53603
In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body...
PT-2025-28033
Name of the Vulnerable Software and Affected Versions: Dradis versions through 4.16.0 Description: Dradis allows referencing external images over HTTPS instead of requiring the use of embedded images. This can be exploited by an authorized author to attempt to steal the Net-NTLM hashes of other...
BELL-CVE-2025-38160
Bulletin has no description...
BELL-CVE-2025-38095
Bulletin has no description...
BELL-CVE-2025-38107
Bulletin has no description...