796 matches found
CVE-2023-54386
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54385
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54384
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54383
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54382
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54381
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54380
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54379
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54378
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54377
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54376
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54375
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
[SECURITY] Fedora 44 Update: abrt-2.17.9-1.fc44
abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...
UBUNTU-CVE-2026-58180
The Apache Traffic Server txnbox plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...
PT-2026-65652
Summary sendFile derives the served filename from the raw request path while opening the file from the cleaned path, so appending a trailing slash empties the derived name and defeats both the never-serve rule for the ACL file and the block list. Finding Medium: trailing-slash ACL and hidden-file...
PT-2026-64839
Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.12.2. The root cause is a sanitization-ordering defect: the rendered notification content is decoded back into live HTML after it has already passed through the Simply...
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator
Code Generation Literal Injection in Kiota Ruby Generator Leads to Arbitrary Code Execution Impact The Kiota Ruby code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI default fields and property names directly into Ruby...
EUVD-2026-48439
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
Insufficient validation of byte array arguments in JNI-based XXHash implementations in lz4-java 1.11.0 and earlier allows callers to crash the JVM by passing an invalid array reference or invalid range to native XXHash methods. This affects applications where an attacker can influence the byte...
