53255 matches found
Incorrect authorization for CLI in Guardian/CMC before 25.2.0
Summary An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. Impact An authenticated user with limited privileges can issue administrative CLI commands, altering the device...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414306)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414306 advisory. A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hcisock.c in the Linux Kernel. This flaw allows an...
PT-2025-41180
『allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system』 IBM Security Verify Access and IBM Verify Identity Access products. CVE-2025-36354, CVE-2025-36355, CVE-2025-363546 https://t.co/SJGzwogo72...
CVE-2025-36354
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...
EUVD-2025-32574
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...
Malicious code in nileleetpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eceaecf27b80a45e0afdf23d21f9f3f40a980d75be3b6c082b9458dbd2a33ace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47912 Malicious code in nileleetpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eceaecf27b80a45e0afdf23d21f9f3f40a980d75be3b6c082b9458dbd2a33ace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in niletestpkg2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a39ba896a63b265112c85ccbc844af38c7163958acf56a31f9f6983b914eaad7 The OpenSSF Package Analysis project identified 'niletestpkg2' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-47911 Malicious code in niletestpkg2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a39ba896a63b265112c85ccbc844af38c7163958acf56a31f9f6983b914eaad7 The OpenSSF Package Analysis project identified 'niletestpkg2' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-47910 Malicious code in @aviatrixdev/flight-suit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc9bc5d34874a3f8d1af5ce792a55535218bde1497f02e6e1d0e0f7264a25d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-59337
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...
PT-2025-40918
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access and IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.9.0 IBM Security Verify Access and IBM Security Verify Access Docker versions 11.0.0.0 through 11.0.1.0 Description An unauthenticated user may be...
VulnCheck KEV: CVE-2025-64446
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests...
BIT-DISCOURSE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...
CVE-2023-53582
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace in...
CVE-2023-53549
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/deleting large number of elements in one step in ipset, it can take a reasonable amount of time and can result in soft lockup errors. The patch...
UBUNTU-CVE-2023-53582
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace in...
CVE-2023-53582 wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds Fix a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strreplace in...