3431 matches found
CVE-2025-15281 vulnerabilities
Vulnerabilities for packages: glibc...
📄 MCPJam 1.4.2 Command Injection
This Metasploit exploit module targets the MCP Model Context Protocol server, specifically exploiting a command injection vulnerability in the /api/mcp/connect endpoint. The vulnerability allows unauthorized remote command execution by sending crafted JSON payloads that are executed by the server...
CVE-2026-24117 vulnerabilities
Vulnerabilities for packages: zot, flux-source-controller, trivy-operator, falcoctl, kubescape, kyverno-notation-aws, buildkitd, trivy, witness, gh, cosign, gitsign, vexctl, zarf, policy-controller, neuvector-sigstore-interface, ko, teleport, tekton-chains, tkn, goreleaser, slsa-verifier, aactl,...
CVE-2026-22985
In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...
GHSA-7C2F-R6GC-H92H vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-5RM3-299F-6M9V vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2025-71176
pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...
Logwatch 7.14
Logwatch analyzes and reports on unix system logs. It is a customizable and pluggable log monitoring system which will go through the logs for a given period of time and make a customizable report. It should work right out of the package on most systems...
CVE-2026-21226 vulnerabilities
Vulnerabilities for packages: kserve, airflow, datadog-agent, open-webui, py3-cassandra-medusa, az...
CVE-2026-22036 vulnerabilities
Vulnerabilities for packages: langfuse, librechat, kibana, renovate, langfuse-fips, jitsucom-jitsu, gemini-cli, code-server...
CVE-2025-36063
The vulnerability CVE-2025-36063 affects IBM Sterling Connect:Express Adapter for Sterling B2B Integrator, version 5.2.0.00–5.2.0.12. The root cause is that the adapter does not invalidate the user session after logout, potentially allowing an authenticated user to impersonate another user in the...
CVE-2026-0903
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. Chromium security severity: Medium...
[SECURITY] Fedora 43 Update: rust-lru-0.16.3-1.fc43
A LRU cache implementation...
ROS-20260120-7318
Vulnerability in kernel-lt related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2025-31510
In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting XSS allows remote attackers to inject arbitrary web script or HTML into the login page via the tab parameter, for Choice authentication...
CVE-2026-22817 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-XG92-G8H7-V7R4 vulnerabilities
Vulnerabilities for packages: postgresql...
GHSA-F6MR-38G8-39RG vulnerabilities
Vulnerabilities for packages: mods, ollama, k8sgpt...