1993 matches found
AZL-68867 CVE-2025-40056 affecting package kernel for versions less than 6.6.112.1-2
In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copytoiter return value check The return value of copytoiter can't be negative, check whether the copied length is equal to the requested length instead of checking for negative values...
CVE-2024-31755 affecting package apparmor for versions less than 3.1.7-1
CVE-2024-31755 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...
CVE-2022-2989 affecting package podman for versions less than 4.1.1-21
CVE-2022-2989 affecting package podman for versions less than 4.1.1-21. A patched version of the package is available...
CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1
CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...
AZL-69622 CVE-2025-61099 affecting package frr for versions less than 9.1.1-5
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaqueinfodetail function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted LS Update packet...
WordPress PixelYourSite plugin < 11.1.2 - Admin+ LFI vulnerability
Admin+ LFI vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin PixelYourSite – Your smart PIXEL TAG Manager versions 11.1.2...
EUVD-2025-35438
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ThemeMove Learts Addons learts-addons allows SQL Injection.This issue affects Learts Addons: from n/a through 1.7.5...
CVE-2025-49936
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through 8.3.2...
CVE-2025-58058 affecting package packer for versions less than 1.9.5-15
CVE-2025-58058 affecting package packer for versions less than 1.9.5-15. A patched version of the package is available...
CVE-2024-45781 affecting package grub2 for versions less than 2.06-15
CVE-2024-45781 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15
CVE-2024-45774 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-9
CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...
CVE-2025-54409 affecting package aide for versions less than 0.16-17
CVE-2025-54409 affecting package aide for versions less than 0.16-17. A patched version of the package is available...
CVE-2025-0685 affecting package grub2 for versions less than 2.06-15
CVE-2025-0685 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
CVE-2025-62058 WordPress Houzez Theme - Functionality plugin < 4.2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through 4.2.0...
EUVD-2025-35343
The SM CountDown Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's smcountdown shortcode in versions less than, or equal to, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
AZL-68646 CVE-2025-53062 affecting package mysql for versions less than 8.0.44-2
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-68643 CVE-2025-53040 affecting package mysql for versions less than 8.0.44-2
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-68702 CVE-2025-53045 affecting package mysql for versions less than 8.0.44-2
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...