mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling

The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not...

CVE-2025-15513

The Float Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to improper error handling in the verifyFloatResponse function in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to mark any WooCommerce order as...

CVE-2017-6900

An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VAL1 should be enclosed in quotes to prevent the potential for Bash command injection. Further to...

EUVD-2020-0552

Malware in sbrugna...

EUVD-2006-0334

Malware in sbrugna...

EUVD-2017-7831

Malware in sbrugna...

EUVD-2007-3916

Malware in sbrugna...

EUVD-2016-4220

Malware in sbrugna...

EUVD-2002-0811

Malware in sbrugna...

EUVD-2020-6220

Malware in sbrugna...

EUVD-2021-1630

Malware in sbrugna...

EUVD-2018-13396

Malware in sbrugna...

EUVD-2018-3913

Malware in sbrugna...

EUVD-2022-35689

Malicious code in bioql PyPI...

EUVD-2022-2992

Malicious code in bioql PyPI...

EUVD-2024-53450

Malicious code in bioql PyPI...

EUVD-2024-36944

Malicious code in bioql PyPI...

CVE-2025-7849

A memory corruption vulnerability due to improper error handling when a VILinkObj is null exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in github.com/golang-jwt/jwt/v4 v4.4.2

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of github.com/golang-jwt/jwt/v4 v4.4.2 Vulnerability Details CVEID:CVE-2024-51744 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to...

Mageia: Security Advisory (MGASA-2025-0203)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...