2473 matches found
AsgoreCore (>=0.1.0 <=0.1.2), RustyBox (=0.1.0) +425 more potentially affected by unknown CVE via xcb (>=0.10.1 <=1.2.2)
xcb CARGO version =0.10.1, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =1.0.9, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-655H-HG88-5QMF...
CVE-2025-38580
In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode use after free in ext4endiorsvwork In ext4ioenddefercompletion, check if ioend-listvec is empty to avoid adding an ioend that requires no conversion to the irsvconversionlist, which in turn prevents starting an...
Linux Distros Unpatched Vulnerability : CVE-2019-17531
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific...
Linux Distros Unpatched Vulnerability : CVE-2025-3454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of uninitialized values in the use of extrainfo, which could lead to undefined behavior...
CVE-2025-55299 VaulTLS has a password-based login exploit in additional user accounts
VaulTLS is a modern solution for managing mTLS mutual TLS certificates. Prior to 0.9.1, user accounts created through the User web UI have an empty but not NULL password set, attackers can use this to login with an empty password. This is combined with that fact, that previously disabling the...
CVE-2025-31714
In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2025-31714
In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed...
Addressing Side-Channel Threats in Quantum Key Distribution Via Deep Anomaly Detection
Traditional countermeasures against security side channels in quantum key distribution QKD systems often suffer from poor compatibility with deployed infrastructure, the risk of introducing new vulnerabilities, and limited applicability to specific types of attacks. In this work, we propose an...
Linux Distros Unpatched Vulnerability : CVE-2021-40085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a...
Huawei HarmonyOS and EMUI Resource Read Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A resource read vulnerability exists in Huawei HarmonyOS...
Linux Distros Unpatched Vulnerability : CVE-2021-20329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object wit...
CVE-2025-8891
The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...
MAL-2025-15914 Malicious code in bnrn-extra (npm)
The package bnrn-extra was found to contain malicious code...
MAL-2025-9997 Malicious code in @zalastax/nolb-_extra (npm)
The package @zalastax/nolb-extra was found to contain malicious code...
Malicious code in test-mlw2-extra-varas-dilly-merge (npm)
The package test-mlw2-extra-varas-dilly-merge was found to contain malicious code...
MAL-2025-35305 Malicious code in test-mlw2-extra-varas-dilly-merge (npm)
The package test-mlw2-extra-varas-dilly-merge was found to contain malicious code...
Malicious code in bnrn-extra (npm)
The package bnrn-extra was found to contain malicious code...