Astra Linux – Vulnerability in Firefox, Thunderbird

Sandbox escape due to a use-after-free in the Graphics:Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

Astra Linux – Vulnerability in Firefox, Thunderbird

Memory safety bugs exist in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141, and Thunderbird 141. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have...

Astra Linux – Vulnerability in Firefox, Thunderbird

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...

AZL-69631 CVE-2025-12464 affecting package qemu for versions less than 8.2.0-25

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

CVE-2025-12460

Summary: CVE-2025-12460 describes a Stored XSS vulnerability in Afterlogic Aurora webmail. Affected versions: 9.8.3 and earlier. ** vulnerability mechanism:** an attacker can embed JavaScript in an HTML email via an img tag, which may execute in the recipient’s webmail browser context. Impact (pe...

CVE-2025-64364 WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Masterstudy masterstudy allows PHP Local File Inclusion.This issue affects Masterstudy: from n/a through 4.8.126...

AZL-69470 CVE-2025-62229 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-3

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

WordPress Kleo Theme < 5.5.0 is vulnerable to Local File Inclusion

Software Kleo Type Theme Vulnerable versions 5.5.0 Fixed in 5.5.0 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2025-64363 Patch priority Low CVSS severity Low 7.5 Developer EPC PSID 1d3d5f3ae51e Credits João Pedro S Alcântara Kinorth Required privilege...

AZL-69302 CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

CVE-2025-64197 WordPress Rehub theme < 19.9.9.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through 19.9.9.1...

CVE-2025-64197

CVE-2025-64197 concerns the WordPress theme REHub. The vulnerability is a Stored XSS caused by improper input neutralization during web page generation, affecting Rehub-theme versions before 19.9.9.1 (reported by Red Hat, NVD, ENISA EUVD, CVE lists, and Patchstack). The Red Hat and NVD entries de...

langchainlanggraph-checkpoint-sqlite SQL注入漏洞

langchainlanggraph-checkpoint-sqlite is an open source database connectivity Python library from LangChain. An SQL injection vulnerability exists in langchainlanggraph-checkpoint-sqlite versions prior to 2.0.11, which stems from the use of a direct string concatenation that is not properly...

CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6

CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6. A patched version of the package is available...

CVE-2025-48040 affecting package erlang for versions less than 26.2.5.15-1

CVE-2025-48040 affecting package erlang for versions less than 26.2.5.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-10148 affecting package cmake for versions less than 3.30.3-10

CVE-2025-10148 affecting package cmake for versions less than 3.30.3-10. A patched version of the package is available...

CVE-2025-11082 affecting package gdb for versions less than 13.2-6

CVE-2025-11082 affecting package gdb for versions less than 13.2-6. A patched version of the package is available...

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2

CVE-2020-14040 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package buildah for versions less than 1.41.4-2

CVE-2022-29526 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-21626 affecting package buildah for versions less than 1.41.4-2

CVE-2024-21626 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...