CVE-2025-0451 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-0825

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters "\r\n" when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more...

CVE-2025-1016 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1017 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1013 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1014 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1020 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1018 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1009 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-1011 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-0510

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135...

CVE-2025-24959

zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment variables into process.env. This can lead to arbitrary command execution or unexpected behavior in applications that rely on environment variables for...

CVE-2025-24898

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::selectnextproto can return a slice pointing into the server argument's buffer but with a lifetime bound to the client argument. In situations where the sever buffer's lifetime is shorter than th...

CVE-2024-57966

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive...

OpenLink Software Virtuoso Installed (Linux / Unix)

Binary data openlinkvirtuosonixinstalled.nbin...

CVE-2024-9676 affecting package skopeo for versions less than 1.14.4-3

CVE-2024-9676 affecting package skopeo for versions less than 1.14.4-3. A patched version of the package is available...

GHSA-WXCC-2F3Q-4H58 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2023-3823 affecting package php for versions less than 8.1.22-1

CVE-2023-3823 affecting package php for versions less than 8.1.22-1. A patched version of the package is available...

CVE-2025-21679

In the Linux kernel, the following vulnerability has been resolved: btrfs: add the missing error handling inside getcanonicaldevpath Inside function getcanonicaldevpath, we call dpath to get the final device path. But dpath can return error, and in that case the next strscpy call will trigger an...

CVE-2025-21670

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...