6786 matches found
Security update for ignition
This update for ignition fixes the following issues: CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input bsc1248548 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
GHSA-3GC7-FJRX-P6MG
creationtimestamp| type| source ---|---|--- 2025-08-27 10:21:25+00:00| seen| https://gist.github.com/rz1989s/3787e596e76e4bb395efb5509a1c1804...
CVE-2025-30038 Session ID leakage in Zone.Identifier of downloaded files
The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream ADS for all files downloaded from potentially untrusted sources...
CVE-2025-9506
creationtimestamp| type| source ---|---|--- 2025-08-27 06:35:07+00:00| seen| https://gist.github.com/Darkcrai86/cf52c2ba035bb723c3b27bd247d12f5e...
Linux Distros Unpatched Vulnerability : CVE-2025-48383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and...
Linux Distros Unpatched Vulnerability : CVE-2019-20393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-free is present in libyang before v1.0-r1 in the function yyparse when an empty description is used. Applications that use libyang to parse untrusted...
Linux Distros Unpatched Vulnerability : CVE-2022-32983
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters. CVE-2022-32983 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2023-1452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality ...
Linux Distros Unpatched Vulnerability : CVE-2025-6858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5Cflushsingleentry of the file src/H5Centry.c. T...
Linux Distros Unpatched Vulnerability : CVE-2024-3204
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in c-blosc2 up to 2.13.2 and classified as critical. Affected by this vulnerability is the function ndlz4decompress of the file...
Linux Distros Unpatched Vulnerability : CVE-2021-43860
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permission...
CVE-2025-0093
creationtimestamp| type| source ---|---|--- 2025-08-26 23:19:12+00:00| seen| Telegram/MXBIQxDw1YXcZeB0-LzEC2SdKDTmldNu9dYttxvhaZYs...
CVE-2024-23147
creationtimestamp| type| source ---|---|--- 2025-08-26 21:18:27+00:00| seen| Telegram/cj8lkwGZwt3P4E-sARELhhb19aMxyriFy8EhJ18ICyz51A...
CVE-2024-23155
creationtimestamp| type| source ---|---|--- 2025-08-26 21:18:19+00:00| seen| Telegram/MDIgSXL4BlGCK1kNlr4OTA70VFjKdWy94PHSZ3aL6uLTnk...
CVE-2025-23312
creationtimestamp| type| source ---|---|--- 2025-08-26 20:17:44+00:00| seen| Telegram/twJqFL0iEQWKbhbQC4jZGZs7O8mY3Om2fxKfMhxYhdUHl10...
CVE-2025-9482
creationtimestamp| type| source ---|---|--- 2025-08-26 13:52:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115095395017724011...
CVE-2025-53811 TCC Bypass via misconfigured Node fuses in Mosh-Pro
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC Transparency, Consent, and Control permissions. Acquired resource access is limited to previously granted...
CVE-2025-41702
creationtimestamp| type| source ---|---|--- 2025-08-26 07:23:51+00:00| seen| https://infosec.exchange/users/certvde/statuses/115093866501139038 2025-08-31 03:14:02+00:00| published-proof-of-concept| https://t.me/icscert/1309...
CVE-2025-57809
A flaw was found in xgrammar. Recursive grammar definitions could trigger infinite recursion during parsing in GrammarMatcherBase::ExpandEquivalentStackElements, leading to unbounded stack growth and a segmentation fault. This vulnerability allows remote attackers to cause a denial of service DoS...
