678 matches found
EUVD-2025-35169
Multiple stored cross-site scripting XSS vulnerabilities in the Future Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...
CVE-2025-60932
Multiple stored cross-site scripting XSS vulnerabilities in the Current Goals function of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Goal Name, Goal Notes, Action Step Name, Action Step...
JLSEC-2025-102 In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU...
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
Amazon Linux 2 : sox, --advisory ALAS2-2025-3032 (ALAS-2025-3032)
The version of sox installed on the remote host is prior to 14.4.1-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3032 advisory. A floating point exception divide-by-zero issue was discovered in SoX in functon startread of wav.c file. An attacker with a crafted w...
CVE-2025-11695
When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5...
WordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WoodMart versions 8.3.2...
CVE-2025-59958
This CVE affects Juniper Networks Junos OS Evolved on PTX Series (Packet Forwarding Engine). Affected component: firewall filters (output, on WAN/revenue interfaces). Root cause: improper handling when action is 'reject' causing matching packets to be sent to the Routing Engine, consuming RE reso...
GHSA-W9PC-FMGC-VXVW vulnerabilities
Vulnerabilities for packages: ruby3.3-rack, ruby3.4-rack, gitlab-cng, ruby3.2-rack, ruby4.0-rack...
GHSA-P543-XPFM-54CP vulnerabilities
Vulnerabilities for packages: ruby3.3-rack, ruby3.4-rack, gitlab-cng, ruby3.2-rack, ruby4.0-rack...
Juniper Junos OS Evolved 代码问题漏洞
Juniper Junos OS Evolved is a network operating system from Juniper USA. A code issue vulnerability exists in Juniper Junos OS Evolved versions prior to 22.4R3-EVO and 23.2 to prior to 23.2R2-EVO, which arises from not properly checking for an exception condition that could result in...
EUVD-2020-19341
Malware in sbrugna...
EUVD-2025-30471
Malicious code in bioql PyPI...
EUVD-2025-28190
Malicious code in bioql PyPI...
EUVD-2025-26959
Malicious code in bioql PyPI...
EUVD-2025-24244
Malicious code in bioql PyPI...
EUVD-2025-32082
Malicious code in bioql PyPI...
EUVD-2025-32051
Malicious code in bioql PyPI...
EUVD-2022-0039
Malicious code in bioql PyPI...
CVE-2022-50432
In the Linux kernel, the following vulnerability has been resolved: kernfs: fix use-after-free in kernfsremove Syzkaller managed to trigger concurrent calls to kernfsremovebynamens for the same file resulting in a KASAN detected use-after-free. The race occurs when the root node is freed during...
CVE-2025-10342 HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'...