353 matches found
CGA-865G-VJ9J-8VHC
Bulletin has no description...
CGA-7FCP-FHXP-PVRF
Bulletin has no description...
CGA-C95G-6HRC-XXRQ
Bulletin has no description...
Horilla cross-site scripting vulnerability
Horilla is a free open-source human resources software developed by Horilla Company. Version 1.4.0 of Horilla contains a cross-site scripting vulnerability. This vulnerability stems from an incomplete regular expression used in the hasxss function, which is independent of context, potentially...
RHSA-2026:0483 Red Hat Security Advisory: wireshark security update
Bulletin has no description...
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
Note This is a separate issue from the RCE vulnerability State Pollution currently being patched. While related to tokensecurity.js, it involves different endpoints and risks. Summary An unauthenticated information disclosure vulnerability allows any user to retrieve sensitive system information,...
PT-2026-6139
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The virtio transport get credit function in the Linux kernel contains a flaw related to credit calculation using unsigned arithmetic. Specifically, if the peer reduces its advertised...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993186)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993186 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992191)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992191 advisory. In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descriptors If the source entity does not contain an...
BELL-CVE-2025-68373
Bulletin has no description...
BELL-CVE-2025-68248
Bulletin has no description...
BELL-CVE-2025-68294
Bulletin has no description...
MINI-JQ7G-GRRM-93XJ
Bulletin has no description...
Arbitrary Code Injection
Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Code Injection via the hasmetacommands function. An attacker can execute arbitrary commands on the system by crafting a SQL file that begins with a UTF-8 Byte Order Mark or special byte sequences...
MINI-RQXJ-GH6G-35VG
Bulletin has no description...
Exploit for CVE-2025-55182
CVE-2025-55182: React Server Components RCE A minimal proof o...
MINI-576H-RC24-66W6
Bulletin has no description...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: A race condition in the call to haslockedchildren was fixed. maydecodefh calls haslockedchildren while holding no locks. This is an oopsable race condition… The other callers are safe, as they hold namespacesem, and...
JLSEC-2025-186 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...