10168 matches found
CVE-2025-8677 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-J3W4-M6QJ-VMM5 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2025-55754
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an...
CVE-2025-62708 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2025-62611 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-12207
A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed to the public and may...
GHSA-H5FG-JPGR-RV9C vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, apache-pulsar, keycloak-fips, keycloak...
CVE-2025-40023
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read BMGPCIECAP0x138340 register nor access PCODE already guarded by the info.skippcode flag so we shouldn't expose attributes that require any of them to...
CVE-2025-62399
Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...
CVE-2025-62395
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...
CVE-2025-62396
An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...
CVE-2025-62401
An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...
GHSA-JJJJ-JWHF-8RGR vulnerabilities
Vulnerabilities for packages: minio...
CVE-2025-62506 vulnerabilities
Vulnerabilities for packages: minio...
CVE-2025-54856
Movable Type contains a stored cross-site scripting vulnerability in Edit ContentData page. If crafted input is stored by an attacker with "ContentType Management" privilege, an arbitrary script may be executed on the web browser of the user who accesses Edit ContentData page...
Lynis Auditing Tool 3.1.6
Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...
CVE-2025-62813
Removed by vendor...
SUSE CVE-2025-61748
unknown...