1073 matches found
JVN#39546799: Mailform Pro CGI generating error messages containing sensitive information
Mailform Pro CGI provided by SYNCK GRAPHICA contains a vulnerability listed below. Generation of error message containing sensitive information CWE-209 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 6.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 3.7...
DLA-4179-1 libavif - security update
Bulletin has no description...
CVE-2025-48371 OpenFGA Authorization Bypass
OpenFGA is an authorization/permission engine. OpenFGA versions 1.8.0 through 1.8.12 corresponding to Helm chart openfga-0.2.16 through openfga-0.2.30 and docker 1.8.0 through 1.8.12 are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users are affected...
PT-2025-22502 · Cloudflare · Pingora
Name of the Vulnerable Software and Affected Versions: Pingora versions prior to the fixed version Description: A request smuggling issue was identified in Pingora's proxying framework, pingora-proxy, allowing malicious HTTP requests to be injected via manipulated request bodies on cache HITs. Th...
DLA-4173-1 openjdk-17 - security update
Bulletin has no description...
SUSE-SU-2025:01591-1 Security update for python-maturin
This update for python-maturin fixes the following issues: - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631. - CVE-2025-4574: crossbeam-channel: double-free leading to possible memory corruption ...
RHSA-2025:7489 Red Hat Security Advisory: php security update
Bulletin has no description...
PT-2025-21246 · Oa System · Oa System
Name of the Vulnerable Software and Affected Versions: OA System versions prior to 2025.01.01 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at the "/inform/InformManageController.java...
DLA-4164-1 libeconf - security update
Bulletin has no description...
DLA-4149-1 nagvis - security update
Bulletin has no description...
DSA-5912-1 thunderbird - security update
Bulletin has no description...
DLA-4126-2 jinja2 - regression update
Bulletin has no description...
DSA-5907-1 linux - security update
Bulletin has no description...
DLA-4136-1 openrazer - security update
Bulletin has no description...
Amazon Linux AMI : ghostscript (ALAS-2025-1967)
The version of ghostscript installed on the remote host is prior to 8.70-24.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1967 advisory. The calculation of the buffer size was being done with int values, and overflowing that data type. The bug has exist...
JVN#22348866: Active! mail vulnerable to stack-based buffer overflow
Active! mail provided by QUALITIA CO., LTD. contains a stack-based buffer overflow vulnerability CWE-121. The developer states that attacks exploiting the vulnerability has been observed. Impact Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead t...
DSA-5905-1 graphicsmagick - security update
Bulletin has no description...
JVN#30641875: Multiple vulnerabilities in BizRobo!
BizRobo! is an RPA Robotic Process Automation software provided by OPEN, Inc. Users compile an automation flow using DesignStudio, a development application that runs on Windows, and create robot files. A web application Management Console is provided to schedule RPA execution and to check the...