1738 matches found
mingw-freetype and spice-client-win security update
An update is available for mingw-freetype, spice-client-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW Windows Freetype library. Security Fixes:...
The vulnerability of the Windows Ancillary Function Driver for WinSock on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Malicious code in win-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5753 Malicious code in win-utils-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99d55e34bfdccef418c3d9a32fed525e724c57d61a1128d9924506b8b25200e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2025:9380 Red Hat Security Advisory: spice-client-win security update
Bulletin has no description...
Important: Red Hat Security Advisory: spice-client-win security update
An update for spice-client-win is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2025-50054
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...
CVE-2025-50054: Heap-based Buffer Overflow
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...
CVE-2025-52790: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in r-win WP-DownloadCounter wp-downloadcounter allows Stored XSS.This issue affects WP-DownloadCounter: from n/a through = 1.01...
Untrusted Search Path
Overview Affected versions of this package are vulnerable to Untrusted Search Path. An attacker can achieve remote code execution by planting malicious files on the victim's system, with knowledge of where they should be placed, then tricking a user to run these files. Remediation Upgrade...
MAL-2025-4841 Malicious code in keypress-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f954e50f0d90246c5d2855aca594a6179bc90df76259b2b657e357f06af6cb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in keypress-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f954e50f0d90246c5d2855aca594a6179bc90df76259b2b657e357f06af6cb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
mingw-freetype and spice-client-win security update
2.8-3.1 - Fix CVE-2025-27363 Resolves: RHEL-83101...
RHSA-2025:8292 Red Hat Security Advisory: mingw-freetype and spice-client-win security update
Bulletin has no description...
RHSA-2025:8253 Red Hat Security Advisory: spice-client-win security update
Bulletin has no description...
RHSA-2025:8219 Red Hat Security Advisory: spice-client-win security update
Bulletin has no description...
RHSA-2025:8195 Red Hat Security Advisory: mingw-freetype and spice-client-win security update
Bulletin has no description...
CVE-2024-12545
The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the resetinstallation function...
CVE-2024-11898
The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swin-campaign' shortcode in all versions up to, and including, 2.6.9 due to insufficient input...