10156 matches found
CVE-2025-0665 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2023-52924
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map "1.2.3.4 : jump foo" 2. timeouts are enabl...
CVE-2023-52925
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't fail inserts if duplicate has expired nftables selftests fail: run-tests.sh testcases/sets/0044intervaloverlap0 Expected: 0-2 . 0-3, got: W: FAILED ./testcases/sets/0044intervaloverlap0: got 1 Insertion...
CVE-2025-0725
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPTACCEPTENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow...
CVE-2025-0665
libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...
CVE-2025-0167
When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...
CVE-2025-0167
When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare...
CVE-2024-13723
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP...
CVE-2024-13722
The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious link that will execute arbitrary JavaScript in the context of the browser once clicked. The attack can be performed on both authenticated and unauthenticated users...
CVE-2025-0444 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-0451 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-0445 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-0825
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters "\r\n" when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more...
CVE-2025-1016 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-1017 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-1014 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-1020 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-1013 vulnerabilities
Vulnerabilities for packages: firefox...