6735 matches found
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987443)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987443 advisory. The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox 14...
WordPress Responsive Lightbox & Gallery plugin < 2.5.3 - Unauthenticated Stored-XSS via Comments vulnerability
Unauthenticated Stored-XSS via Comments vulnerability discovered by Matthew Rollings in WordPress Plugin Responsive Lightbox versions 2.5.3...
CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9
CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-9. A patched version of the package is available...
CVE-2025-58063 affecting package coredns for versions less than 1.11.1-21
CVE-2025-58063 affecting package coredns for versions less than 1.11.1-21. A patched version of the package is available...
CVE-2024-45338 affecting package cni for versions less than 1.0.1-20
CVE-2024-45338 affecting package cni for versions less than 1.0.1-20. A patched version of the package is available...
CVE-2025-58060 affecting package cups for versions less than 2.3.3op2-10
CVE-2025-58060 affecting package cups for versions less than 2.3.3op2-10. A patched version of the package is available...
CVE-2022-32149 affecting package cni for versions less than 1.0.1-20
CVE-2022-32149 affecting package cni for versions less than 1.0.1-20. A patched version of the package is available...
CVE-2025-59734 Heap-buffer-overflow write in FFmpeg SANM process_ftch
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...
AZL-68132 CVE-2025-39929 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...
CVE-2025-9029
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkithandlereviewsubmission function in versions less than, or equal to, 1.2.16. This is due to the plugin not properly verifyin...
EUVD-2025-14719
Malicious code in bioql PyPI...
EUVD-2024-52243
Malicious code in bioql PyPI...
EUVD-2024-44952
Malicious code in bioql PyPI...
EUVD-2023-32369
Malicious code in bioql PyPI...
EUVD-2022-49961
Malicious code in bioql PyPI...
EUVD-2024-53500
Malicious code in bioql PyPI...
EUVD-2025-26397
Malicious code in bioql PyPI...
EUVD-2023-48807
Malicious code in bioql PyPI...