DEBIAN-CVE-2025-13014

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2023-30669

Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2024-10387

CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow a threat actor with network access to send crafted messages to the device, potentially resulting in Denial-of-Service...

CVE-2024-6679

A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2023-40642

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

BELL-CVE-2021-4193 CVE-2021-4193 does not affect BellSoft software

Bulletin has no description...

PT-2022-3561 · Google +1 · Google-Oauth-Java-Client +1

Name of the Vulnerable Software and Affected Versions: google-oauth-java-client versions prior to 1.33.3 Description: The vulnerability is related to the IDToken verifier not verifying if a token is properly signed. This allows an attacker to provide a compromised token with a custom payload, whi...

cmark-gfm 输入验证错误漏洞

cmark-gfm is an extended version of the C-reference implementation of CommonMark, a rationalized version with canonical Markdown syntax. cmark-gfm suffers from an input validation error vulnerability that could be exploited by an attacker to cause remote code execution in applications using the...

CVE-2021-40104

An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass...

CVE-2018-20340

Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security token on a computer where the affected library is...

Libav Denial of Service Vulnerability (CNVD-2016-12212)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12208)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12210)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...

Libav Denial of Service Vulnerability (CNVD-2016-12214)

Libav is a cross-platform open source video and audio recording, conversion of a set of solutions . A denial of service vulnerability exists in Libav. An attacker can exploit this vulnerability to cause a denial of service by crashing an application that uses an affected library file...