10139 matches found
CVE-2025-50106 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk, openjdk-8-openj9, openjdk-26-openj9, openjdk-crac, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9...
CVE-2025-30749 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk, openjdk-8-openj9, openjdk-26-openj9, openjdk-crac, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9...
GHSA-WPM9-MHXC-7HWJ vulnerabilities
Vulnerabilities for packages: openjdk, openjdk-crac...
CVE-2025-30754 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk, openjdk-8-openj9, openjdk-26-openj9, openjdk-crac, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9...
CVE-2025-7962
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...
CVE-2025-48795 vulnerabilities
Vulnerabilities for packages: wildfly, apache-tika...
GHSA-36WV-V2QP-V4G4 vulnerabilities
Vulnerabilities for packages: wso2is, wildfly, apache-tika...
CVE-2025-30192
An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled queries by chaining ECS enabled requests and enforcing stricter...
CVE-2025-49087
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS7 padding mode is used...
CVE-2025-38351
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: tileserver-gl, argo-workflows, kubeflow-katib, thingsboard, serve, json-server, code-server, kubeflow-centraldashboard, sqlpad...
CVE-2025-7339 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, sqlpad, serve, vitess, kubeflow-centraldashboard, thingsboard, tileserver-gl, tileserver-gl-fips, json-server, gitlab-rails-ce-fips, argo-workflows, code-server, gitlab-rails-ce...
CVE-2025-7394
In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...
CVE-2025-7395
A certificate verification error in wolfSSL when building with the WOLFSSLSYSCACERTS and WOLFSSLAPPLENATIVECERTVALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardles...
CVE-2025-54310
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...
CVE-2025-6197
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL...
CVE-2025-6023
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...
CVE-2025-53506 vulnerabilities
Vulnerabilities for packages: tomcat...