8168 matches found
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RTUpdate2 fixes the following issues: CVE-2024-56664: bpf, sockmap: fix race between element replace and close bsc1235250 CVE-2025-37752: netsched: schsfq: move the limit validation bsc1245776 CVE-2025-37797: netsched: hfsc: Fix a UAF vulnerability in...
Linux Distros Unpatched Vulnerability : CVE-2016-4567
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attacker...
Linux Distros Unpatched Vulnerability : CVE-2024-26971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequen...
The vulnerability of Microsoft Exchange Server servers arises from the improper handling of an additional special element, which allows attackers to perform spoofing attacks.
The vulnerability of Microsoft Exchange Server servers is related to the improper handling of an additional special element. Exploiting this vulnerability allows a malicious actor to perform spam attacks remotely...
ROS-20250822-02
A vulnerability in the dom4j open source Java library for XML, XPath and XSLT is related to the improper cleansing of elements and attribute names in XML documents. Exploitation of the vulnerability could Allow an attacker acting remotely to launch an XXE attack on the target system...
Linux Distros Unpatched Vulnerability : CVE-2016-1000342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject...
Cross-site Scripting (XSS)
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Cross-site Scripting XSS via the HTML form element on the Form Trigger node. An authenticated attacker can execute arbitrary JavaScript code in the context of authenticated users by injecting...
Linux Distros Unpatched Vulnerability : CVE-2025-1816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of...
Linux Distros Unpatched Vulnerability : CVE-2023-2454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated...
CVE-2025-6679 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...
Linux Distros Unpatched Vulnerability : CVE-2019-11742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a element due to an error in how...
Linux Distros Unpatched Vulnerability : CVE-2020-35474
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of...
Malicious code in ac-element-tracker (npm)
The package ac-element-tracker was found to contain malicious code...
Malicious code in bioinformatics-areology-element-ui-mira (npm)
The package bioinformatics-areology-element-ui-mira was found to contain malicious code...
Malicious code in element-ui-apollo-gatsby-process (npm)
The package element-ui-apollo-gatsby-process was found to contain malicious code...
Malicious code in element-ui-rate-limiter-archaeogenetics-prosthetics (npm)
The package element-ui-rate-limiter-archaeogenetics-prosthetics was found to contain malicious code...
Malicious code in epimetheus-quantum-element-ui-cosmiconfig (npm)
The package epimetheus-quantum-element-ui-cosmiconfig was found to contain malicious code...
Malicious code in express-element-ui-shelljs-apollo (npm)
The package express-element-ui-shelljs-apollo was found to contain malicious code...