10167 matches found
CVE-2025-52567
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 0.84 through 10.0.18, usage of RSS feeds or external calendars when planning is subject to SSRF exploit. The previous security patches provided...
CVE-2025-52897
GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. This is fixed in version 10.0.19...
GHSA-X4RX-4GW3-53P4 vulnerabilities
Vulnerabilities for packages: spire-server, opentelemetry-collector, k9s, docker-compose, apko, melange, buf, osv-scanner, tw, zarf, dagger, falcoctl, wolfictl, aws-otel-collector, opentelemetry-collector-contrib, buildah, cadvisor, trivy, goreleaser, kargo, trufflehog, docker-cli-buildx,...
GHSA-6V2P-P543-PHR9 vulnerabilities
Vulnerabilities for packages: newrelic-infra-operator, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, git-credential-oauth, kubernetes-dashboard-auth-fips, gcp-compute-persistent-disk-csi-driver-fips, cluster-proportional-autoscaler-fips, crossplane-provider-gcp, fulcio-fips,...
GHSA-5662-CV6M-63WH vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-54059 vulnerabilities
Vulnerabilities for packages: cg...
CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-43214
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-7458
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...
CVE-2025-8264
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...
Lynis Auditing Tool 3.1.5
Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...
CVE-2025-54369 vulnerabilities
Vulnerabilities for packages: sqlpad...
CVE-2025-1153 vulnerabilities
Vulnerabilities for packages: binutils...
GHSA-3FRG-24QP-XXV2 vulnerabilities
Vulnerabilities for packages: binutils...
GHSA-M837-G268-MMV7 vulnerabilities
Vulnerabilities for packages: sqlpad...
GHSA-4M4R-J72Q-7W52 vulnerabilities
Vulnerabilities for packages: binutils...
GHSA-M837-G268-MMV7 vulnerabilities
Vulnerabilities for packages: sqlpad...
CVE-2025-3198 vulnerabilities
Vulnerabilities for packages: binutils...