33990 matches found
CVE-2025-27916
An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...
AnyDesk 安全漏洞
AnyDesk is a remote desktop connection software from AnyDesk, a German company. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which originates from data that can be manipulated when a connection is established over an IP address, potentially resulting in AnyDesk ID spoofi...
PT-2025-45379
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.14.1 Description Weblate versions 5.14 and below disclose the IP address of a project member when inviting a user to a project. The audit log, which includes IP addresses from administrative actions, is accessible t...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990572)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990572 advisory. In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profilepc The 'profilepc' function is used for timer-based...
CVE-2025-55155
Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing...
Weblate leaks the IP of project member inviting user to be reviewer in Audit log
Summary Weblate leaks the IP address of the project member inviting the user to the project in the audit log. Details The audit log included IP addresses from admin-triggered actions, and those could be viewed by invited users. Impact The inviting user's admin's IP address could be leaked to...
GHSA-GR35-VPX2-QXHC Weblate leaks the IP of project member inviting user to be reviewer in Audit log
Summary Weblate leaks the IP address of the project member inviting the user to the project in the audit log. Details The audit log included IP addresses from admin-triggered actions, and those could be viewed by invited users. Impact The inviting user's admin's IP address could be leaked to...
GO-2025-3988 Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail
Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail...
CVE-2025-20343 Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS...
CVE-2025-20343
Cisco Identity Services Engine (ISE) contains a logic error in RADIUS processing for MAC addresses that are already rejected, which could allow an unauthenticated, remote attacker to cause ISE to restart and trigger a DoS. The vulnerability affects Cisco ISE RADIUS handling and can be exploited b...
SUSE-SU-2025:20987-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RTUpdate8 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631 - CVE-2025-38618: vsock: Do not allow binding to VMADDRPORTANY bsc1249207 - CVE-2025-38617: net/packet: fix a race in packetsetrin...
CVE-2025-61304
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...
CVE-2025-61304
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2025-21079
Samsung Members before version 5.5.01.3 has an input validation flaw that allows a remote attacker to connect to an arbitrary URL and launch arbitrary Samsung Members–privileged activities. User interaction is required to trigger the issue. Public sources in multiple feeds corroborate this CVE (C...
CVE-2025-21079
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2025-47368
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-64109
creationtimestamp| type| source ---|---|--- 2025-11-05 01:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4twsheogp2s 2025-11-05 03:30:35+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4u4chxbz5h2 2025-11-05 08:58:04+00:00| seen|...