7310 matches found
CLSA-2025-1757523038 Fix CVE(s): CVE-2025-1735
SECURITY UPDATE: inadequate error checking in pgsql and pdopgsql escaping functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdopgsql extensions to prevent storing of improperly escaped data - CVE-2025-1735...
Linux Distros Unpatched Vulnerability : CVE-2016-6870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in the 1 mbdetectencoding, 2 mbsendmail, and 3 mbdetectorder functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified...
EulerOS 2.0 SP9 : glibc (EulerOS-SA-2025-2123)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of...
CVE-2025-42915
Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...
CVE-2025-42958 Missing Authentication check in SAP NetWeaver
Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the...
CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)
Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...
CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks)
Fiori app Manage Payment Blocks does not perform the necessary authorization checks, allowing an attacker with basic user privileges to abuse functionalities that should be restricted to specific user groups.This issue could impact both the confidentiality and integrity of the application without...
CVE-2025-42915
CVE-2025-42915 affects the SAP Fiori app Manage Payment Blocks . The root cause is missing authorization checks, permitting an attacker with basic user privileges to abuse functions restricted to specific user groups. Impact is limited to confidentiality and integrity (no availability impact stat...
Security update for firebird
This update for firebird fixes the following issues: CVE-2017-11509: authenticated remote code execution via the definition external functions that don't match the original definition of the entry point bsc1087421. Patch Instructions: To install this SUSE update use the SUSE recommended...
Google Android elevation of privilege vulnerability (CNVD-2025-26885)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of privilege checking in multiple functions. The vulnerability can be exploited by an attacker to cause privilege escalation...
CVE-2025-10061
An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This vulnerability could lead to deni...
CVE-2025-10061 Malformed $group Query May Cause MongoDB Server to Crash
An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This vulnerability could lead to deni...
Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm)
The package @zalastax/nolb-functions-io-labs-perfo was found to contain malicious code...
MAL-2025-43005 Malicious code in @zalastax/nolb-_functions-io-labs-perfor (npm)
The package @zalastax/nolb-functions-io-labs-perfor was found to contain malicious code...
MAL-2025-43004 Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm)
The package @zalastax/nolb-functions-io-labs-perfo was found to contain malicious code...
SQL Injection
apachesuperset is vulnerable to SQL Injection. The vulnerability is due to improper enforcement of the DISALLOWEDSQLFUNCTIONS security feature, which allows an attacker with SQL Lab access to circumvent the denylist using a special inline block and execute restricted SQL functions...
mongodb -- Malformed $group Query May Cause MongoDB Server to Crash
[email protected] reports: An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This...
PT-2025-36333
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 14.8.2 Description ImageMagick is free and open-source software used for editing and manipulating digital images. The software includes insecure functions: SeekBlob, which allows advancing the stream offset beyond...
