CVE-2025-26153

CVE-2025-26153 describes a stored XSS in Chamilo LMS 1.11.28, specifically in the message compose feature. The vulnerability allows an attacker to inject malicious scripts into messages, which execute when recipients (e.g., administrators) reply to the message. The available documents consistentl...

CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

CVE-2025-26153

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious scripts into messages, which execute when victims, such as administrators, reply to the message...

CVE-2025-0495 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape...

GHSA-M4GQ-FM9H-8Q75 vulnerabilities

Vulnerabilities for packages: docker-compose, kubescape...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: k8sgpt, dagger, k3s, helm, helm-operator, chartmuseum, kubescape, zarf, docker-cli-buildx, kaniko, skaffold, fuse-overlayfs-snapshotter, neuvector-scanner, opa-envoy, xeol, kubevela, docker, flux-helm-controller, cert-manager-cmctl, helm-push, cilium-cli, opa,...

CVE-2025-0495 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, docker-compose, kubescape...

GHSA-M4GQ-FM9H-8Q75 vulnerabilities

Vulnerabilities for packages: docker-compose-fips, docker-compose, kubescape...

An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow.

...

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

...

CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4. A patched version of the package is available...

CVE-2024-10846 affecting package docker-compose for versions less than 2.27.0-4

CVE-2024-10846 affecting package docker-compose for versions less than 2.27.0-4. A patched version of the package is available...

Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop

...

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10. A patched version of the package is available...

CVE-2025-27615

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file

umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...

AZL-57374 CVE-2025-22869 affecting package docker-compose for versions less than 2.27.0-4

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57434 CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...