10135 matches found
GHSA-XFFM-G5W8-QVG7 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-45770
jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant ...
CVE-2025-53112
GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 9.1.0 through 10.0.18, a lack of permission checks can result in unauthorized removal of some specific resources. This is fixed in version 10.0.1...
CVE-2025-53357
GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...
CVE-2025-53111
GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...
CVE-2025-52897
GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. This is fixed in version 10.0.19...
CVE-2025-52567
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. The previous security patches provided...
GHSA-X4RX-4GW3-53P4 vulnerabilities
Vulnerabilities for packages: apko, docker-cli-buildx, syft, trufflehog, trivy, goreleaser, docker-compose, splunk-otel-collector, tw, osv-scanner, buf, zot, dagger, kargo, wolfictl, aws-otel-collector, buildah, grype, spire-server, k9s, nerdctl, opentelemetry-collector, openfga, buildkitd,...
GHSA-6V2P-P543-PHR9 vulnerabilities
Vulnerabilities for packages: temporal, distribution-fips, kubewatch, vcluster, xeol-fips, flux-helm-controller, portieris, git-credential-oauth, cass-operator-fips, victoriametrics-operator, cert-exporter, crossplane-provider-aws-sqs, tflint, helm-fips, nri-kubernetes, velero-fips, wave-fips,...
GHSA-5662-CV6M-63WH vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-54059 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-43214
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...
Lynis Auditing Tool 3.1.5
Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...
CVE-2025-8264
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...
CVE-2025-54369 vulnerabilities
Vulnerabilities for packages: sqlpad...
CVE-2025-1153 vulnerabilities
Vulnerabilities for packages: binutils...