1560 matches found
GHSA-WCJ4-JW5J-44WH vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, localstack...
EUVD-2026-0110
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0204
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0321
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0549
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0700
A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early...
EUVD-2025-205696
DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...
GHSA-X44P-GVRJ-PJ2R vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2025-68941
Gitea before 1.22.3 mishandles access to a private resource upon receiving an API token with scope limited to public resources...
EUVD-2025-205313
FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication...
EUVD-2025-205119
In the Linux kernel, the following vulnerability has been resolved: opp: Fix use-after-free in lazyopptables after probe deferral When devpmoppoffindiccpaths in allocateopptable returns -EPROBEDEFER, the opptable is freed again, to wait until all the interconnect paths are available. However, if...
GHSA-HM5P-X4RQ-38W4
creationtimestamp| type| source ---|---|--- 2025-12-23 23:11:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771407249317251 2026-01-07 20:04:13+00:00| published-proof-of-concept| Telegram/shQsG5TFmMrzus3uWOqA-vjUO4oHdrJHZ6Xu7ifps-tm5s...
EUVD-2025-204449
Not used...
EUVD-2025-203435
An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...
EUVD-2025-203178
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-GVMQ-HR29-XRX3 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-8405 Improper Encoding or Escaping of Output in GitLab
GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...
CVE-2025-8405: Improper Encoding or Escaping of Output
GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...