8948 matches found
BIT-NODE-MIN-2025-23087
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...
CVE-2025-24814
Core creation allows users to replace "trusted" configset files with arbitrary configuration Solr instances that 1 use the "FileSystemConfigSetService" component the default in "standalone" or "user-managed" mode, and 2 are running without authentication and authorization are vulnerable to a sort...
The vulnerability of the PT MC components of the security control systems—PT MaxPatrol SIEM, PT MaxPatrol VM, PT MaxPatrol EDR, PT MaxPatrol Carbon, and PT MaxPatrol O2—allows attackers to enhance their privileges.
The vulnerability of the PT MaxPatrol SIEM, PT MaxPatrol VM, PT MaxPatrol EDR, PT MaxPatrol Carbon, and PT MaxPatrol O2 security control components is related to improper authentication. Exploiting this vulnerability can allow attackers, operating remotely, to gain increased privileges...
CVE-2025-23089
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
CVE-2025-23088
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
CVE-2025-23087
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life EOL versions that no longer receive security updates or patches. Mitigation Mitigation for this issue is either not available or the currently...
SUSE-SU-2025:0216-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: - Install nbdkit-server to avoid pulling unneeded...
CVE-2025-23087
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities...
CVE-2025-21570
...
CVE-2025-21571
...
CVE-2025-21567
...
CVE-2025-21556
...
CVE-2025-21495
CVE-2025-21495 affects Oracle MySQL Server’s MySQL Enterprise Firewall (component: Firewall). Affected versions: 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or fr...
CVE-2025-21490
...
CVE-2024-21245
...
XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
Impact Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components. Patches Will be patched in 14.3.2 and 15.1.2. Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil...
GHSA-WV8V-RMW2-25WC XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
Impact Authenticated users are able to exploit an XSS vulnerability when viewing certain localized backoffice components. Patches Will be patched in 14.3.2 and 15.1.2. Note: This issue was reported by Pratik Patil from NetSPI @Nexusss-ppatil...
CVE-2025-24012 Umbraco Backoffice Components Have XSS/HTML Injection Vulnerability
Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, authenticated users are able to exploit a cross-site scripting vulnerability when viewing certain localized backoffice components. Versions 14.3.2 and 15.1.2 conta...