CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2

CVE-2020-28852 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-58963

Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through 1.1.9...

CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12

CVE-2025-58058 affecting package skopeo for versions less than 1.14.2-12. A patched version of the package is available...

CVE-2025-59571

CVE-2025-59571 describes a Reflected XSS in the WordPress WorkScout-Core plugin, affecting versions older than 1.7.06. The issue arises from improper input neutralization during web page generation. CVSS 3.1 base score 7.1 ( HIGH ) with network access, low impacts to confidentiality/integrity/ava...

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9

CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...

CVE-2024-45338 affecting package cni for versions less than 1.0.1-20

CVE-2024-45338 affecting package cni for versions less than 1.0.1-20. A patched version of the package is available...

AZL-68664 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30. A patched version of the package is available...

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3. A patched version of the package is available...

CVE-2025-38471 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38471 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39787 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38671 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38671 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38448 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38448 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

AZL-67884 CVE-2025-46152 affecting package pytorch for versions less than 2.2.2-9

In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6. A patched version of the package is available...

CVE-2025-10290

Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press. This vulnerability was fixed in Focus for iOS...

Amazon Linux 2 : memcached, --advisory ALAS2MEMCACHED1.5-2025-001 (ALASMEMCACHED1.5-2025-001)

The version of memcached installed on the remote host is prior to 1.5.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2MEMCACHED1.5-2025-001 advisory. Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted...

AZL-66962 CVE-2025-39689 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of setftracefilter and setftracenotrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy...