37726 matches found
CVE-2025-67733
A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts...
OPENSUSE-SU-2026:10247-1 python311-Django4-4.2.28-1.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.28-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10243-1 freerdp2-2.11.7-5.1 on GA media
These are all security issues fixed in the freerdp2-2.11.7-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10246-1 libsoup-2_4-1-2.74.3-17.1 on GA media
These are all security issues fixed in the libsoup-24-1-2.74.3-17.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10245-1 libsoup-3_0-0-3.6.6-1.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10241-1 cacti-1.2.30+git231.bca15e70c-1.1 on GA media
These are all security issues fixed in the cacti-1.2.30+git231.bca15e70c-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10235-1 cosign-3.0.5-1.1 on GA media
These are all security issues fixed in the cosign-3.0.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10238-1 python311-PyPDF2-2.11.1-4.1 on GA media
These are all security issues fixed in the python311-PyPDF2-2.11.1-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10240-1 weblate-5.16-1.1 on GA media
These are all security issues fixed in the weblate-5.16-1.1 package on the GA media of openSUSE Tumbleweed...
SQL Injection
Overview dolibarr/dolibarr is a modern and easy to use web software to manage your business. Affected versions of this package are vulnerable to SQL Injection via the POST parameters such as actioncode, demandreasonid, and availabilityid. PoC Dolibarr ERP/CRM 10.0.1 contains multiple SQL injectio...
CVE-2019-25450
Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through POST parameters. Attackers can inject malicious SQL through parameters like actioncode, demandreasonid, and availabilityid in...
CVE-2019-25450
Dolibarr ERP/CRM 10.0.1 contains SQL injection vulnerabilities in card.php endpoints (parameters such as actioncode, demand_reason_id, availability_id) that allow authenticated attackers to manipulate queries and extract sensitive data. The flaw enables boolean-based blind, error-based, and time-...
CVE-2026-27482 Ray: Dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable e.g., --dashboard-host=0.0.0.0, a web page via DNS rebinding o...
CVE-2026-27482
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. If the dashboard/agent is reachable e.g., --dashboard-host=0.0.0.0, a web page via DNS rebinding o...
PT-2026-34868
Name of the Vulnerable Software and Affected Versions Grafana Tempo versions prior to 2.8.4 Grafana Tempo versions 2.9.0 through 2.9.1 Grafana Tempo versions 2.10.0 through 2.10.1 Description An uncontrolled resource consumption issue exists where queries with large limits can trigger excessive...
ROS-20260220-73-0018
A vulnerability in the lan743xptpioeventclockget function of the net component of the Linux operating system kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...
The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkfuncarg function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, relates to the lack of checking for the returned value. Exploiting this vulnerability could allow a remote attacker to compromi...
OPENSUSE-SU-2026:10232-1 cosign-3.0.4-2.1 on GA media
These are all security issues fixed in the cosign-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-23596
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...