654 matches found
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: step-issuer-fips, cert-manager-google-cas-issuer, opentelemetry-operator, opentelemetry-operator-fips, cert-manager-istio-csr-fips, aws-privateca-issuer, step-issuer, gitlab-operator-fips, cert-manager-webhook-pdns, gitlab-operator, cert-manager-openshift-routes-fips...
WordPress CAS <= 1.0.0 - Unauthenticated SSRF vulnerability
Unauthenticated SSRF vulnerability discovered by Aly Khaled Aly Abd Al-aal in WordPress Theme Cas versions = 1.0.0...
PT-2026-4088
Name of the Vulnerable Software and Affected Versions Casey Bisson wpCAS versions through 1.07 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the injection of...
CVE-2021-47875
GeoGebra CAS Calculator 6.0.631.0 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can create a payload with 8000 repeated characters and paste it into the calculator's input field to trigger an application...
GeoGebra CAS Calculator security vulnerability
GeoGebra CAS Calculator is a symbolic calculation calculator developed by the American company GeoGebra. Version 6.0.631.0 of the GeoGebra CAS Calculator has a security vulnerability; this vulnerability stems from a buffer overflow in the input fields, which may lead to the application crashing...
PT-2026-3827
GeoGebra CAS Calculator 6.0.631.0 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can create a payload with 8000 repeated characters and paste it into the calculator's input field to trigger an application...
CVE-2018-1000188
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...
CVE-2022-35248
A improper authentication vulnerability exists in Rocket.Chat...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-992937)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992937 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...
HSEC-2023-0006 x509-validation does not enforce pathLenConstraint
x509-validation does not enforce pathLenConstraint x509-validation prior to version 1.4.8 did not enforce the pathLenConstraint value. Constrained CAs could accidentally or deliberately issue CAs below the maximum depth and x509-validation would accept certificates issued by the unauthorised...
EUVD-2017-1388
Malware in sbrugna...
EUVD-2013-3902
Malware in sbrugna...
EUVD-2020-6020
Malware in sbrugna...
EUVD-2020-1357
Malware in sbrugna...
EUVD-2014-2334
Malware in sbrugna...
EUVD-2012-1139
Malware in sbrugna...
EUVD-2021-1832
Malware in sbrugna...
EUVD-2018-21133
Malware in sbrugna...