Lucene search
K

30 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.2 views

Fedora 43 : restic (2025-416c3b48b3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-416c3b48b3 advisory. Update to 0.18.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

7.5CVSS7.3AI score0.00044EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/02 12:0 a.m.3 views

openSUSE 16 Security Update : rnp (openSUSE-SU-2025-20116-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20116-1 advisory. - update to 0.18.1: CVE-2025-13470: PKESK public-key encrypted session keys were generated as all-zero, allowing trivial decryption of messages...

8.7CVSS6AI score0.00043EPSS
Exploits0References5
Fedora
Fedora
added 2025/11/29 5:7 p.m.9 views

[SECURITY] Fedora 42 Update: rnp-0.18.1-1.fc42

RNP is a set of OpenPGP RFC4880 tools...

8.7CVSS6.6AI score0.00043EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2025/11/28 12:0 a.m.3 views

Security update for rnp (moderate)

openSUSE security update: security update for rnp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20116-1 Rating: moderate References: bsc1253957 Cross-References: CVE-2025-13402 CVE-2025-13470 Affected Products: openSUSE Leap 16.0...

8.7CVSS7.1AI score0.00043EPSS
Exploits0References1
OSV
OSV
added 2025/11/27 12:39 p.m.2 views

OPENSUSE-SU-2025:20116-1 Security update for rnp

This update for rnp fixes the following issues: - update to 0.18.1: CVE-2025-13470: PKESK public-key encrypted session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only boo1253957, CVE-2025-13402...

8.7CVSS5.8AI score0.00043EPSS
Exploits0References3
OSV
OSV
added 2025/11/24 12:0 a.m.1 views

OPENSUSE-SU-2025:15762-1 librnp0-0.18.1-1.1 on GA media

These are all security issues fixed in the librnp0-0.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

8.7CVSS5.8AI score0.00043EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.3 views

PT-2025-46955

Name of the Vulnerable Software and Affected Versions Memos versions up to and including 0.18.1 Description Memos is a note-taking service that utilizes Access Tokens for application authentication. A flaw exists where Access Tokens remain valid even after a user changes their password. This mean...

7.5CVSS6.2AI score0.00049EPSS
Exploits1References21
CNNVD
CNNVD
added 2025/11/14 12:0 a.m.3 views

Memos 安全漏洞

Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos 0.18.1 and prior versions that stems from an access token not being invalidated after a password change, which could lead to continued account...

7.5CVSS6.5AI score0.00049EPSS
Exploits1References2
Snyk
Snyk
added 2025/10/30 5:10 p.m.2 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
Exploits0References2
Snyk
Snyk
added 2025/10/30 5:10 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
Exploits0References2
Snyk
Snyk
added 2025/10/30 5:10 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
Exploits0References2
Snyk
Snyk
added 2025/10/30 5:10 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
Exploits0References2
Snyk
Snyk
added 2025/10/30 5:10 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-15586

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.003EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-0736

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0018EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/22 11:33 a.m.6 views

CVE-2018-20975

Fat Free CRM before 0.18.1 has XSS in the tagshelper in app/helpers/tagshelper.rb...

6.1CVSS6AI score0.00295EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.2 views

HashiCorp Boundary 安全漏洞

HashiCorp Boundary is an open source solution from the US-based HashiCorp Inc. It automates secure identity-based user access to hosts and services across environments. A security vulnerability exists in HashiCorp Boundary versions 0.8.0 through 0.18.1, which stems from incorrectly processing HTT...

5.9CVSS6.4AI score0.00392EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2023/02/21 12:30 a.m.18 views

Mind-elixir Cross-site Scripting vulnerability

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

6.1CVSS5.7AI score0.0018EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2023/02/21 12:30 a.m.12 views

GHSA-M22Q-97P5-79V2 Mind-elixir Cross-site Scripting vulnerability

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

6.1CVSS5.9AI score0.0018EPSS
Exploits1References5
NVD
NVD
added 2023/02/20 10:15 p.m.11 views

CVE-2021-32851

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1...

6.1CVSS5.9AI score0.0018EPSS
Exploits1References3
Rows per page
Query Builder