10141 matches found
libarchive security update
3.5.3-5 - Resolves: CVE-2025-25724...
CVE-2025-50182 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-pipenv, az, kserve, ggshield, py3-cassandra-medusa, pypy-3.10, pypy-3.11, jwt-tool, jupyter-base-notebook, kubeflow-katib, k8s-sidecar, mlflow, emissary, reflex, superset, confluent-docker-utils, dask-gateway, py3-pip, airflow,...
CVE-2025-50181 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-pipenv, az, kserve, ggshield, py3-cassandra-medusa, pypy-3.10, pypy-3.11, jwt-tool, jupyter-base-notebook, kubeflow-katib, k8s-sidecar, mlflow, emissary, superset, confluent-docker-utils, dask-gateway, datadog-agent, py3-pip, airflow,...
GHSA-48P4-8XCF-VXJ5 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-pipenv, az, kserve, ggshield, py3-cassandra-medusa, pypy-3.10, pypy-3.11, jwt-tool, jupyter-base-notebook, kubeflow-katib, k8s-sidecar, mlflow, emissary, reflex, superset, confluent-docker-utils, dask-gateway, py3-pip, airflow,...
GHSA-PQ67-6M6Q-MJ2V vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-pipenv, az, kserve, ggshield, py3-cassandra-medusa, pypy-3.10, pypy-3.11, jwt-tool, jupyter-base-notebook, kubeflow-katib, k8s-sidecar, mlflow, emissary, superset, confluent-docker-utils, dask-gateway, datadog-agent, py3-pip, airflow,...
CVE-2025-6547
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: =3.1.2...
CVE-2025-6545
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2...
CVE-2025-6516
A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5Faddrdecodelen of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to...
CVE-2025-52968
xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...
[SECURITY] Fedora 42 Update: mingw-python-setuptools-78.1.1-1.fc42
MinGW Windows Python setuptools library...
CVE-2025-52926
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface...
CVE-2025-6496
A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been...
CVE-2025-6494
A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833. It has been classified as problematic. This affects the function hashmapgetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be...
CVE-2025-6493
A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has bee...
CVE-2025-6375
A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...
CVE-2025-44203
In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...
GHSA-G8XG-6V3J-W97F vulnerabilities
Vulnerabilities for packages: mariadb...
CVE-2023-52969 vulnerabilities
Vulnerabilities for packages: mariadb...