1810 matches found
📄 PKP-WAL 3.5.0-1 baseColour LESS Code Injection
PKP-WAL versions 3.5.0-1 and below suffer from a LESS baseColour related code injection vulnerability. ----------------------------------------------------------------- PKP-WAL = 3.5.0-1 baseColour LESS Code Injection Vulnerability -----------------------------------------------------------------...
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10
CVE-2025-65637 affecting package cni-plugins for versions less than 1.3.0-10. A patched version of the package is available...
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27. A patched version of the package is available...
CVE-2025-65581
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
📄 Flowise 3.0.6 JS Parsing Injection
A JavaScript parsing injection vulnerability exists in Flowise versions prior to 3.0.6 and greater than 2.2.7-patch.1. ============================================================================================================================================= | Title : Flowise 3.0.6 JS Parsing...
CVE-2025-40819
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP4. Affected applications do not properly validate license restrictions against the database, allowing direct modification of the systemticketinfo table to bypass license limitations without proper enforcement...
Oracle Linux 9 : ipa (ELSA-2025-20928)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20928 advisory. 4.12.2-22.0.1.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.12.2-22.1 -...
Malicious code in @actbase/react-native-less-transformer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f669b015d3df7c500b192e927f2890c45ad45dafa608100da2146dca598efa The package @actbase/react-native-less-transformer was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198728
Malicious code in @actbase/react-native-less-transformer npm...
MAL-2025-190710 Malicious code in @actbase/react-native-less-transformer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f669b015d3df7c500b192e927f2890c45ad45dafa608100da2146dca598efa The package @actbase/react-native-less-transformer was found to contain malicious code. Source: ghsa-malware...
Exploit for CVE-2024-58258
CVE‑2024‑58258 – SugarCRM SSRF & Local File Disclosure Abo...
TencentOS Server 4: less (TSSA-2024:0610)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0610 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Siemens SCALANCE and RUGGEDCOM Devices Integer Underflow (Wrap or Wraparound) (CVE-2024-53061)
media: s5p-jpeg: vulnerability due to the possibility of buffer overflows when the variable word is less than 2, which is prevented by adding extra checks. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
firefox: thunderbird: Spoofing issue in Firefox
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox...
EUVD-2025-178280
Malicious code in jekyll-less-npm-local npm...
EUVD-2025-177837
Malicious code in mineralogy-less-loader-dagda-global npm...
EUVD-2025-176897
Malicious code in puppeteer-exobiology-semantic-release-less npm...
EUVD-2025-179919
Malicious code in cache-less-venus-supercluster npm...