UBUNTU-CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string...

OpenSSL 资源管理错误漏洞

OpenSSL is an open source general-purpose cryptographic library capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols from the OpenSSL team. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

CGA-CG8M-6986-25XP

Bulletin has no description...

BELL-CVE-2025-22006

Bulletin has no description...

BELL-CVE-2025-21973

Bulletin has no description...

CGA-H472-WF8J-56Q2

Bulletin has no description...

CGA-GCWR-24JV-8GQP

Bulletin has no description...

CGA-XWPW-FPFR-35Q5

Bulletin has no description...

CGA-XP68-M924-9HWF

Bulletin has no description...

CGA-8GFQ-VJ73-FVMC

Bulletin has no description...

CGA-63VM-3CCC-CRF3

Bulletin has no description...

CGA-V335-X9PG-3FVQ

Bulletin has no description...

CGA-7XGJ-C952-CRC5

Bulletin has no description...

CGA-4QF6-VWM8-3RQ3

Bulletin has no description...

CGA-P9J3-HCG8-GQG2

Bulletin has no description...

CGA-P2QF-QX28-FRXJ

Bulletin has no description...

CVE-2025-2746

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

Missing Critical Step in Authentication

Overview Kentico.Xperience.Libraries is a package for libraries and applications that use Kentico Xperience API. Affected versions of this package are vulnerable to Missing Critical Step in Authentication due to improper handling of empty SHA1 usernames in digest authentication, when the Staging...

Weak Password Requirements

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Weak Password Requirements due to the lack of enforcement on...

SUSE CVE-2025-27112

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...