1573 matches found
Missing Authorization
Jenkins MCP Server Plugin is vulnerable to Missing Authorization. The vulnerability is due to missing permission checks in multiple MCP tools, which allows an attacker to trigger builds and access sensitive information related to job and cloud configurations without proper authorization...
Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2024-50393)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and...
Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2024-50401)
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...
Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37047)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...
Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2024-50399)
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...
CVE-2025-65741
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...
curl: Stack Buffer Overflow in cURL wolfSSL Backend (lib/vtls/wolfssl.c)
Summary: A stack-based buffer overflow exists in the wsslstrerror function of cURL's wolfSSL TLS backend. The function uses an unsafe strcpy call, relying solely on a DEBUGASSERT macro for boundary checking. This macro is disabled in production release builds -DNDEBUG, allowing memory corruption...
October 14, 2025—KB5066835 (OS Builds 26200.6899 and 26100.6899)
None None...
Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-30267)
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later...
Qnap QTS and QuTS hero Buffer Overflow (CVE-2025-30265)
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS...
Qnap QTS and QuTS hero Out-of-Bounds Write (CVE-2025-30273)
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...
Qnap QTS and QuTS hero Path Traversal (CVE-2025-30270)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: opencost, etcd, osv-scanner, terraform-provider-tls-fips, rke2-cloud-provider-fips, flannel-cni-plugin-fips, prometheus-adapter, falco-exporter-fips, k9s, nemo, tetragon-fips, grpc-health-probe-fips, longhorn-manager-fips, terraform-provider-sendgrid, syft-fips,...
PT-2025-49309
Name of the Vulnerable Software and Affected Versions BACnet Protocol Stack versions prior to 1.5.0.rc2 Description The BACnet Protocol Stack library contains flaws in the npdu is expected reply function within src/bacnet/npdu.c. This function does not properly validate the existence of Applicati...
Important: Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.1
Red Hat OpenShift Builds 1.6.1 Releases of Red Hat OpenShift Builds 1.6.1...
PT-2026-28277
Name of the Vulnerable Software and Affected Versions Wazuh affected versions not specified Description The software contains an insecure transport issue due to the use of the -k or --insecure flag with curl, which disables SSL/TLS certificate validation. This allows attackers with network access...
[SECURITY] Fedora 42 Update: source-to-image-1.5.1-1.fc42
Source-to-Image S2I is a toolkit and workflow for building reproducible container images from source code. S2I produces ready-to-run images by injecting source code into a container image and letting the container prepare that source code for execution. By creating self-assembling builder images,...
[SECURITY] Fedora 43 Update: source-to-image-1.5.1-1.fc43
Source-to-Image S2I is a toolkit and workflow for building reproducible container images from source code. S2I produces ready-to-run images by injecting source code into a container image and letting the container prepare that source code for execution. By creating self-assembling builder images,...
[SECURITY] Fedora 42 Update: docker-buildx-0.30.1-1.fc42
Docker CLI plugin for extended build capabilities with BuildKit...
CVE-2025-13502
A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash DoS via a crafted payload to the GLib remote inspector server...