154 matches found
EUVD-2020-4434
Malware in sbrugna...
EUVD-2022-2418
Malicious code in bioql PyPI...
CVE-2025-38724
CVE-2025-38724 affects the Linux kernel; nfsd4_setclientid_confirm() could race with an expiring confirmed client due to not checking get_client_locked() return value, risking a use-after-free. The fix applies to scenarios with an extant confirmed client by obtaining a reference earlier and handl...
CVE-2025-38724 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm Lei Lu recently reported that nfsd4setclientidconfirm did not check the return value from getclientlocked. a SETCLIENTIDCONFIRM could race with a confirmed client...
Linux Distros Unpatched Vulnerability : CVE-2021-47129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: skip expectations for confirmed conntrack nftctexpectobjeval calls...
CVE-2025-5701
The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...
CVE-2024-52913
In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...
CVE-2024-52914
In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...
CVE-2014-100018
Cross-site scripting XSS vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php...
Shopware 安全漏洞
Shopware is a suite of open source e-commerce software from the German company Shopware. A security vulnerability exists in Shopware versions prior to 6.6.10.3 and prior to 6.5.8.17, which stems from a default setting that allows unconfirmed bulk news subscriptions...
CVE-2024-11284
The WP JobHunt plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.9. This is due to the plugin not properly validating a user's identity prior to updating their password through the accountsettingssavecallback function. This mak...
CVE-2024-20495
A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition on an...
CVE-2024-52913
In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...
CVE-2024-52914
In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...
CVE-2024-52914
In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction...
CVE-2024-52914
CVE-2024-52914 affects Bitcoin Core, prior to version 0.18.0. The issue causes a node to be stalled for hours when processing the orphans of a crafted unconfirmed transaction. The available documents state the vulnerability and its impact (long stall), but do not provide exploit details, affected...
CVE-2024-52913
Bitcoin Core prior to 0.21.0 is affected. An attacker could prevent a node from seeing a specific unconfirmed transaction because transaction re-requests are mishandled (CVE-2024-52913). The Red Hat advisories confirm the same impact. The CVSS indicates network attack vector, low complexity, no p...
CVE-2024-52913
In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because transaction re-requests are mishandled...
Bitcoin Core 安全漏洞
Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.18.0, which stems from the fact that nodes may stall for several hours while processing isolated blocks of specially crafted...