10156 matches found
CVE-2025-46803
The default mode of pseudo terminals PTYs allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system...
GHSA-7MFW-WGR7-M3JG vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5RJG-FVGR-3XXF vulnerabilities
Vulnerabilities for packages: jwt-tool, kserve, py3-pipenv, superset, emissary, dask-gateway, checkov, datadog-agent, aws-cli...
CVE-2025-47273 vulnerabilities
Vulnerabilities for packages: jwt-tool, kserve, py3-pipenv, superset, emissary, dask-gateway, checkov, datadog-agent, aws-cli...
CVE-2025-46804
A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0...
CVE-2025-46805
Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root...
CVE-2025-5168
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate3DGSMDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bound...
CVE-2025-5167
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/AssetLib/LWO/LWOLoader.h. The manipulation of the argument out leads to out-of-bounds read. The...
CVE-2025-5165
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read...
CVE-2025-37992
In the Linux kernel, the following vulnerability has been resolved: netsched: Flush gsoskb list too during -change Previously, when reducing a qdisc's limit via the -change operation, only the main skb queue was trimmed, potentially leaving packets in the gsoskb list. This could result in NULL...
GHSA-C72G-53HW-82Q7 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GHSA-4PG4-QVPC-4Q3H vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GHSA-44FP-W29J-9VJ5 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-47944 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-47935 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GHSA-44FP-W29J-9VJ5 vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
GHSA-4PG4-QVPC-4Q3H vulnerabilities
Vulnerabilities for packages: grafana-image-renderer...
CVE-2025-47290 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, docker-compose...
GHSA-CM76-QM8V-3J95 vulnerabilities
Vulnerabilities for packages: neuvector-scanner, docker-compose...
CVE-2025-3580
An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator...