230 matches found
GHSA-5G94-C2WX-8PXW vulnerabilities
Vulnerabilities for packages: dagdotdev, cg, chainctl, amazon-ssm-agent...
GHSA-6P9P-Q6WH-9J89 vulnerabilities
Vulnerabilities for packages: dagdotdev, cg, chainctl, amazon-ssm-agent...
CVE-2025-23632
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...
CVE-2025-68319
In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...
CVE-2025-68319
In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...
CVE-2025-68319 netconsole: Acquire su_mutex before navigating configs hierarchy
In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...
RLSA-2025:20518 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...
CVE-2025-58181 vulnerabilities
Vulnerabilities for packages: ucd, chainctl, cloud-provider-aws-fips, crossplane-provider-aws-route53, prometheus-alertmanager, cilium-cli, gotenberg, tigera-operator, juicefs-csi-driver, dockerize, flannel-fips, argo-cd-fips, flux-notification-controller, trillian-fips, cloud-provider-vsphere,...
GHSA-J5W8-Q4QC-RX2X vulnerabilities
Vulnerabilities for packages: ucd, chainctl, cloud-provider-aws-fips, crossplane-provider-aws-route53, prometheus-alertmanager, cilium-cli, gotenberg, tigera-operator, juicefs-csi-driver, dockerize, flannel-fips, argo-cd-fips, flux-notification-controller, trillian-fips, cloud-provider-vsphere,...
GHSA-F6X5-JH6R-WRFV vulnerabilities
Vulnerabilities for packages: ucd, chainctl, cloud-provider-aws-fips, crossplane-provider-aws-route53, prometheus-alertmanager, cilium-cli, gotenberg, tigera-operator, juicefs-csi-driver, dockerize, flannel-fips, argo-cd-fips, flux-notification-controller, trillian-fips, cloud-provider-vsphere,...
CVE-2025-47914 vulnerabilities
Vulnerabilities for packages: ucd, chainctl, cloud-provider-aws-fips, crossplane-provider-aws-route53, prometheus-alertmanager, cilium-cli, gotenberg, tigera-operator, juicefs-csi-driver, dockerize, flannel-fips, argo-cd-fips, flux-notification-controller, trillian-fips, cloud-provider-vsphere,...
CVE-2025-12258 TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from...
VulnCheck KEV: CVE-2023-41011
Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...
EUVD-2025-33755
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...
CVE-2025-60269
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...
CVE-2025-60269
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...
CVE-2025-60269
JEEWMS 20250820 is vulnerable to SQL Injection via the exportXls function in src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java. The root cause, as described across Red Hat, NVD, CNNVD, CVE lists, is improper handling of input in the exportXls workflow, en...
CVE-2025-60269
JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file...
CVE-2022-50550 blk-iolatency: Fix memory leak on add_disk() failures
In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix memory leak on adddisk failures When a gendisk is successfully initialized but adddisk fails such as when a loop device has invalid number of minor device numbers specified, blkcginitdisk is called during init...