44706 matches found
BIT-LIBPYTHON-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...
BIT-LIBPYTHON-2020-10735
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int"text", a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits float, decimal, int.frombytes, and int for binary bases 2, 4, 8, 16, and 32 are no...
Skia Module HarmonyOS Data Compromise
The vulnerability of the skia module in the HarmonyOS operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux kernel net/bridge/br_multicast.c Heap Buffer Overflow DoS
The vulnerability of the br Multicast Port Context Initialization function in the net/bridge/br Multicast.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...
PT-2025-32602
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: The application server does not allow administrators to assign distinguished authorizations for different user roles. This allows authenticated users to...
Linux Distros Unpatched Vulnerability : CVE-2020-25661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw...
Linux Distros Unpatched Vulnerability : CVE-2021-3760
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availabilit...
ffmpeg-4-4.4.6-5.1 on GA media (moderate)
ffmpeg-4-4.4.6-5.1 on GA media Announcement ID: openSUSE-SU-2025:15427-1 Rating: moderate Cross-References: CVE-2025-7700 CVSS scores: CVE-2025-7700 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-7700 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...
Linux Distros Unpatched Vulnerability : CVE-2025-22125
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt...
Linux Distros Unpatched Vulnerability : CVE-2021-20288
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys,...
CVE-2025-54788
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions and below, the InboundEmail module allows the arbitrary execution of queries in the backend database, leading to SQL injection. This can have wide-reaching implications on...
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media Announcement ID: openSUSE-SU-2025:15424-1 Rating: moderate Cross-References: CVE-2015-7561 CVE-2016-9962 CVE-2017-1000056 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002101 CVE-2018-16733 CVE-2018-19184 CVE-2019-1002100 CVE-2019-1002101...
Linux Distros Unpatched Vulnerability : CVE-2021-3506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure...
OPENSUSE-SU-2025:15427-1 ffmpeg-4-4.4.6-5.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.6-5.1 package on the GA media of openSUSE Tumbleweed...
chromedriver-139.0.7258.66-1.1 on GA media (moderate)
chromedriver-139.0.7258.66-1.1 on GA media Announcement ID: openSUSE-SU-2025:15421-1 Rating: moderate Cross-References: CVE-2025-54874 CVE-2025-8576 CVE-2025-8577 CVE-2025-8578 CVE-2025-8579 CVE-2025-8580 CVE-2025-8581 CVE-2025-8582 CVE-2025-8583 CVSS scores: CVE-2025-54874 SUSE : 7...
OESA-2025-1991 jakarta-mail security update
The Jakarta Mail API provides a platform-independent and protocol-independent framework to build mail and messaging applications. Security Fixes: A vulnerability has been found in Eclipse Jakarta Mail 2.2 and classified as problematic.The CWE definition for the vulnerability is CWE-147. The produ...
CVE-2025-54636
Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54647
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of this vulnerability may affect availability...