4943 matches found
CVE-2025-9165 vulnerabilities
Vulnerabilities for packages: tiff...
GHSA-P48P-6MXJ-W7JX vulnerabilities
Vulnerabilities for packages: tiff...
CVE-2025-27240
A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field...
ROS-20250912-01
Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...
ROS-20250912-02
Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...
com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError
A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...
CVE-2025-39788
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCIUTRLNEXUSTYPE On Google gs101, the number of UTP transfer request slots nutrs is 32, and in this case the driver ends up programming the UTRLNEXUSTYPE incorrectly as 0. This is because the...
CVE-2025-39765
In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix idafree call while not allocated In the sndutimercreate function, if the kasprintf function return NULL, sndutimerputid will be called, finally use idafree to free the unallocated id 0. the syzkaller reported the...
GHSA-G6PH-V22V-23J6 vulnerabilities
Vulnerabilities for packages: php...
GHSA-8G2X-6FRQ-Q83X vulnerabilities
Vulnerabilities for packages: haproxy...
CVE-2016-2102 vulnerabilities
Vulnerabilities for packages: haproxy...
php: Streams HTTP wrapper does not fail for headers with invalid name and no colon
A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers...
[SECURITY] Fedora 41 Update: rust-crypto-auditing-client-0.2.3-2.fc41
Event broker client for crypto-auditing project...
CVE-2025-23165 vulnerabilities
Vulnerabilities for packages: nodejs...
GHSA-93MF-426M-G6X9 vulnerabilities
Vulnerabilities for packages: k8sgateway, kubernetes-dns-node-cache, juicefs, cloudflared...
GHSA-93MF-426M-G6X9 vulnerabilities
Vulnerabilities for packages: k8sgateway-fips, eks-distro, k8sgateway, kubernetes-dns-node-cache, eks-distro-fips, cloudflared, juicefs, kubernetes-dns-node-cache-fips, cloudflared-fips...
GHSA-QJH3-4J3H-VMWP vulnerabilities
Vulnerabilities for packages: kyverno-fips, kyverno, flux-fips...
CVE-2025-9943
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...
net/http: Request smuggling due to acceptance of invalid chunked data in net/http
A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...