1066 matches found
PT-2025-22502 · Cloudflare · Pingora
Name of the Vulnerable Software and Affected Versions: Pingora versions prior to the fixed version Description: A request smuggling issue was identified in Pingora's proxying framework, pingora-proxy, allowing malicious HTTP requests to be injected via manipulated request bodies on cache HITs. Th...
DLA-4173-1 openjdk-17 - security update
Bulletin has no description...
SUSE-SU-2025:01591-1 Security update for python-maturin
This update for python-maturin fixes the following issues: - CVE-2025-3416: openssl: use-after-free in Md::fetch and Cipher::fetch when Some... value passed as properties argument to either function bsc1242631. - CVE-2025-4574: crossbeam-channel: double-free leading to possible memory corruption ...
RHSA-2025:7489 Red Hat Security Advisory: php security update
Bulletin has no description...
PT-2025-21246 · Oa System · Oa System
Name of the Vulnerable Software and Affected Versions: OA System versions prior to 2025.01.01 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at the "/inform/InformManageController.java...
DLA-4164-1 libeconf - security update
Bulletin has no description...
DLA-4149-1 nagvis - security update
Bulletin has no description...
DSA-5912-1 thunderbird - security update
Bulletin has no description...
DLA-4126-2 jinja2 - regression update
Bulletin has no description...
DSA-5907-1 linux - security update
Bulletin has no description...
DLA-4136-1 openrazer - security update
Bulletin has no description...
Amazon Linux AMI : ghostscript (ALAS-2025-1967)
The version of ghostscript installed on the remote host is prior to 8.70-24.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1967 advisory. The calculation of the buffer size was being done with int values, and overflowing that data type. The bug has exist...
JVN#22348866: Active! mail vulnerable to stack-based buffer overflow
Active! mail provided by QUALITIA CO., LTD. contains a stack-based buffer overflow vulnerability CWE-121. The developer states that attacks exploiting the vulnerability has been observed. Impact Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead t...
DSA-5905-1 graphicsmagick - security update
Bulletin has no description...
JVN#30641875: Multiple vulnerabilities in BizRobo!
BizRobo! is an RPA Robotic Process Automation software provided by OPEN, Inc. Users compile an automation flow using DesignStudio, a development application that runs on Windows, and create robot files. A web application Management Console is provided to schedule RPA execution and to check the...
DSA-5897-1 lemonldap-ng - security update
Bulletin has no description...
DLA-4106-2 jetty9 - regression update
Bulletin has no description...
DSA-5895-1 xz-utils - security update
Bulletin has no description...
PT-2025-14733 · Binary Carpenter · Binarycarpenter Free Woocommerce Product Table View
Name of the Vulnerable Software and Affected Versions: BinaryCarpenter Free Woocommerce Product Table View versions 1.78 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can...