CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability affects Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

PT-2025-46378

Name of the Vulnerable Software and Affected Versions IntelR Processor Identification Utility versions prior to 8.0.43 Description The software uses unmaintained third-party components which may allow an escalation of privilege. A system software adversary with an authenticated user and a low...

Intel® Processor Identification Utility Software Advisory

Summary: Potential security vulnerabilities in some Intel® Processor Identification Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20010 Description: Use of unmaintained...

curl: libcurl FTP path normalization flaw allows decoded %2e%2e → CWD .. and directory escape (Path Traversal, CWE-22)

ftpparseurlpath in lib/ftp.c URL-decodes FTP path segments e.g. %2e%2e and then splits the decoded path into components using an ad-hoc loop that skips empty components produced by //. The code does not perform canonical path normalization no stack-based handling of . or ... As a result, encoded...

Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector

Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 6.4.0. Vulnerability Details CVEID:CVE-2015-5262 DESCRIPTION: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setti...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to insufficient peer verification logic in the verifyPeerCert function. An attacker can impersonate privileged API components and execute unauthorized operations by compromising a single instance and...

AlmaLinux 8 : kernel (ALSA-2025:19447)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19447 advisory. kernel: wifi: mac80211: check S1G action frame size CVE-2023-53257 kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226...

The vulnerability of the Java library for converting JSON-lib bean components lies in improper syntax validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Java library for converting JSON-lib bean components is related to improper syntax validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing a specially crafted PRT file, which could lead to the execution of arbitrary code in the current process environment...

[SECURITY] Fedora 42 Update: qt5-qtwebengine-5.15.19-2.fc42

Qt5 - QtWebEngine components...

[SECURITY] Fedora 42 Update: qt5-qtwebkit-5.212.0-0.95alpha4.fc42

Qt5 - QtWebKit components...

[SECURITY] Fedora 42 Update: qt5-qttools-5.15.18-1.fc42

Qt5 - QtTool components...

[SECURITY] Fedora 42 Update: qt5-qtconnectivity-5.15.18-1.fc42

Qt5 - Connectivity components...

[SECURITY] Fedora 42 Update: qt5-qtcharts-5.15.18-1.fc42

Qt Charts module provides a set of easy to use chart components. It uses the Qt Graphics View Framework, therefore charts can be easily integrated to modern user interfaces. Qt Charts can be used as QWidgets, QGra phicsWidget, or QML types. Users can easily create impressive graphs by selecting o...

Security update for jasper

This update for jasper fixes the following issues: Update to 4.2.8: CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high bsc1247901. CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC...

Malicious Package

Overview pc-experience-fe-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the url parameter in the /api/images/cache endpoint. An attacker can cause the server to download arbitrary content by supplying a crafted URL. This is only exploitable if the attacker is an...

CVE-2025-43443

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

Malicious code in pc-experience-fe-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...