7141 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-5072
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in message board threads and categories. An attacker can execute arbitrary JavaScript code in the context of another user by injecting malicious scripts into these fields. Details Cross-site scripting or XSS is ...
CVE-2025-54389
AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and/or tamp...
CVE-2023-43683: Stack-based Buffer Overflow
An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. A Stack buffer out-of-bounds access exists because of an integer underflow when handling newline characters...
CVE-2023-43683
A stack buffer out-of-bounds access vulnerability exists in Malwarebytes (versions 4.6.14.326 through 5.1.5.116) and Nebula (versions 2020-10-21 and later). The root cause is an integer underflow occurring during the processing of newline characters. This flaw can lead to an out-of-bounds read or...
CLSA-2025-1755074254 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1755004868 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
libxml2: Out-of-Bounds Read in libxml2
A flaw was found in libxml2. This vulnerability allows out-of-bounds memory access due to incorrect handling of return values in xmlPythonFileRead and xmlPythonFileReadRaw. This is caused by a mismatch between the length of the file in bytes vs the length in characters, as unicode characters can...
libxml2: Out-of-Bounds Read in libxml2
A flaw was found in libxml2. This vulnerability allows out-of-bounds memory access due to incorrect handling of return values in xmlPythonFileRead and xmlPythonFileReadRaw. This is caused by a mismatch between the length of the file in bytes vs the length in characters, as unicode characters can...
Improper Output Neutralization for Logs
Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the exception logging process. An attacker can manipulate log files and forge log entries by...
CLSA-2025-1754941300 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1754940449 Fix CVE(s): CVE-2024-46901
SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via moddavsvn - debian/patches/CVE-2024-46901.patch: fix moddavsvn denial-of-service via control characters in paths...
BIT-LIBPHP-2024-9026 PHP-FPM logs from children may be altered
In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through catchworkersoutput = yes, it may be possible to pollute the final log or remove up to 4 characters from the log messages by manipulating log...
BIT-LIBPYTHON-2023-24329
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters...
CLSA-2025-1754649298 subversion: Fix of CVE-2024-46901
CVE-2024-46901: fix moddavsvn denial-of-service via control characters in paths...
CLSA-2025-1754649017 Fix CVE(s): CVE-2025-1176
SECURITY UPDATE: heap-based Buffer Overflow in ELF ld Component - debian/patches/CVE-2025-1176.patch: prevent illegal memory access when indexing into the symhashes array of the elf bfd cookie structure - CVE-2025-1176...
Linux Distros Unpatched Vulnerability : CVE-2025-7962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...
Amazon Linux 2023 : jakarta-mail (ALAS2023-2025-1117)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1117 advisory. In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages. CVE-2025-7962 Tenable has extracted the preceding description...
