1995 matches found
AZL-73653 CVE-2025-39676 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxxgetepfwdb function is supposed to return NULL on error, but qla4xxxepconnect returns error pointers. Propagating the error pointers will lead to an Oops in t...
AZL-73935 CVE-2025-38732 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfreject: don't leak dst refcount for loopback packets recent patches to add a WARN when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skbdstcheckunset include/linux/skbuff.h:1164 inlin...
CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-18
CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-18. A patched version of the package is available...
CVE-2025-4563 affecting package kubernetes for versions less than 1.30.10-9
CVE-2025-4563 affecting package kubernetes for versions less than 1.30.10-9. A patched version of the package is available...
CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1
CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-53605 affecting package rust for versions less than 1.86.0-4
CVE-2025-53605 affecting package rust for versions less than 1.86.0-4. A patched version of the package is available...
CVE-2025-58352
Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...
AZL-73830 CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEVREGISTER is received on netvsc NIC. During deletion of the namespace, defaultdeviceexitbatch defaultdeviceexitnet...
A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.
...
VulnCheck KEV: CVE-2025-52970
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges o...
CVE-2023-52656 affecting package kernel for versions less than 6.6.96.2-1
CVE-2023-52656 affecting package kernel for versions less than 6.6.96.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-52550
CVE-2025-52550 concerns the E3 Site Supervisor Control firmware. Affected versions are those with firmware upgrades that are unsigned (prior to 2.31F01). This permits forging malicious firmware upgrade packages. An attacker with admin access to application services could install such a package, l...
WordPress Miraculous Theme < 2.0.9 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Miraculous versions 2.0.9...
WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Ziston versions 1.4.5...
WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Bonds in WordPress Theme Indutri versions 1.3.0...
Linux Distros Unpatched Vulnerability : CVE-2021-41165
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all...
AZL-66753 CVE-2025-58058 affecting package jx for versions less than 3.10.182-3
xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current...
WordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability
Arbitrary File Upload Vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Pin WP versions 7.2...
Drupal Facets module < 2.0.10,3.0.0 - Authenticated Cross Site Scripting (XSS) vulnerability
Authenticated Cross Site Scripting XSS vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Facets versions 2.0.10,3.0.0...