1938 matches found
CVE-2025-61736
creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-04 2025-12-17 13:08:37+00:00| seen| https://bsky.app/profile/potato.software/post/3ma6q7gezfx2n 2025-12-17 15:25:07+00:00| seen|...
CVE-2025-13932
creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-06 2025-12-04 22:30:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76zjwd57t2s...
MongoDB 7.0.x < 7.0.25 / 8.0.x < 8.0.15 / 8.2.x < 8.2.1 / 8.3.0-rc0 (SERVER-105873)
The version of MongoDB installed on the remote host is 7.0 prior to 7.0.25, 8.0 prior to 8.0.15, 8.2 prior to 8.2.1 and 8.3.0-rc0. It is, therefore, affected by a vulnerability as referenced in the SERVER-105873 advisory. - An authorized user may crash the MongoDB server by causing buffer...
Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : OpenJDK 25 vulnerabilities (USN-7884-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7884-1 advisory. Jinfeng Guo discovered that the Security component of OpenJDK 25 did not correctly handle certain representations of encoded...
CVE-2025-13751
creationtimestamp| type| source ---|---|--- 2025-12-03 22:59:36+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m74kp5keck23...
EUVD-2025-201108
XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...
EUVD-2025-200990
The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...
EUVD-2025-201008
AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...
CVE-2025-38591
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2025-22055
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-07-28 16:18:11+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
CVE-2024-46752
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
Fedora 43 : nextcloud (2025-84af4b9872)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-84af4b9872 advisory. 32.0.2 release RHBZ2416087 RHBZ2415750 RHBZ2415751 RHBZ2415752 RHBZ2415753 Tenable has extracted the preceding description block directly from the...
Oracle Linux 10 : ELSA-2025-20478-0: / zziplib (ELSA-2025-204780)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-204780 advisory. 0.13.78-2 - Fix directory traversal in unzip binary - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github...
OPENSUSE-SU-2025:15795-1 go1.25-1.25.5-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.5-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 41 : rnp (2025-bc8b81c28d)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-bc8b81c28d advisory. Version 0.18.1 Security Fixed critical issue where PKESK public-key encrypted session keys were generated as all-zero, allowing trivial decryption of message...
CVE-2025-65105
Apptainer is an open source container platform. In Apptainer versions less than 1.4.5, a container can disable two of the forms of the little used --security option, in particular the forms --security=apparmor: and --security=selinux: which otherwise put restrictions on operations that containers...
CVE-2025-13007
creationtimestamp| type| source ---|---|--- 2025-12-02 08:14:36+00:00| seen| https://gist.github.com/Darkcrai86/2fd8e49c89cbc0411e69a6a5f4fa2521 2025-12-02 10:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6yrgjd2fn2s...
Ubuntu: Security Advisory (USN-7902-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-13836
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS...