Lucene search
+L

5255 matches found

CNVD
CNVD
•added 2025/08/15 12:00 a.m.•43 views

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21454)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

5.9CVSS6.5AI score0.00285EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-50075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/eprobes: Have event probes be consistent with kprobes and uprobes Currently, if a...

5.5CVSS5.6AI score0.00186EPSS
SaveExploits0References2
Debian
Debian
•added 2025/08/14 3:26 p.m.•16 views

[SECURITY] [DLA 4272-1] aide security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4272-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 14, 2025 https://wiki.debian.org/LTS -...

6.2CVSS7.1AI score0.00236EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•16 views

PT-2025-33346 · Netbula +1 · Nebula +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions prior to 4.6.14.326 Malwarebytes versions prior to 5.1.5.116 Nebula versions 2020-10-21 and later Description: An out-of-bounds read issue exists in the strings detection utilities, leading to system crashes...

7.5CVSS6.3AI score0.00413EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/14 12:00 a.m.•11 views

RHEL 8 : webkit2gtk3 (RHSA-2025:13780)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:13780 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation...

8.8CVSS7.1AI score0.09464EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2025/08/13 6:44 a.m.•16 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

8.8CVSS8.2AI score0.09464EPSS
SaveExploits4References48
OSV
OSV
•added 2025/08/13 6:44 a.m.•5 views

SUSE-SU-2025:02777-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

10CVSS8.8AI score0.09464EPSS
SaveExploits4References25
BDU FSTEC
BDU FSTEC
•added 2025/08/13 12:00 a.m.•14 views

The vulnerability of the IBM Tivoli Monitoring management tool, related to buffer overflows in dynamic memory, allows a attacker to execute arbitrary code or cause server failures.

The vulnerability of the IBM Tivoli Monitoring information infrastructure lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause server failures...

8.1CVSS6.2AI score0.00503EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
•added 2025/08/13 12:00 a.m.•15 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

8.8CVSS7AI score0.09464EPSS
SaveExploits0References20
OSV
OSV
•added 2025/08/13 12:00 a.m.•11 views

ALSA-2025:13780 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

8.8CVSS6.5AI score0.09464EPSS
SaveExploits0References20
AlmaLinux
AlmaLinux
•added 2025/08/13 12:00 a.m.•9 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

8.8CVSS7AI score0.09464EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2025/08/13 12:00 a.m.•6 views

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2025:02766-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02766-1 advisory. Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to...

10CVSS7AI score0.09464EPSS
SaveExploits4References39
OSV
OSV
•added 2025/08/13 12:00 a.m.•10 views

ALSA-2025:13782 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...

8.8CVSS6.5AI score0.09464EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2025/08/13 12:00 a.m.•6 views

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2025:02765-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02765-1 advisory. Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously...

10CVSS7AI score0.09464EPSS
SaveExploits4References39
SUSE Linux
SUSE Linux
•added 2025/08/12 1:00 p.m.•25 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

8.8CVSS8.2AI score0.09464EPSS
SaveExploits4References48
Tenable Nessus
Tenable Nessus
•added 2025/08/12 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2020-14866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily...

6.8CVSS6.7AI score0.01852EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/11 1:54 p.m.•12 views

BIT-LIBPHP-2025-1735 pgsql extension does not check for errors during escaping

In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...

7.5CVSS7.2AI score0.00988EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/11 1:53 p.m.•20 views

BIT-LIBPHP-2021-21704 Multiple vulnerabilities in Firebird client extension

In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...

5.9CVSS7.2AI score0.01796EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/08/11 12:00 a.m.•22 views

PT-2025-40097

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the dmaengine subsystem, specifically within the Qualcomm BAM DMA driver. Insufficient error handling when required device tree properties clock and...

5.5CVSS7.2AI score0.0015EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-38234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call...

7.8CVSS6.1AI score0.00168EPSS
SaveExploits0References4
Rows per page
Query Builder