1829 matches found
Ollama < 0.4.0 Remote Code Execution
According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.4.0. It is, therefore, affected by a Remote Code Execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...
CVE-2025-23108 Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI
Opening Javascript links in a new tab via long-press in the Firefox iOS client could result in a malicious script spoofing the URL of the new tab. This vulnerability was fixed in Firefox for iOS 134...
CVE-2024-6880 CSRF in MegaBIP
During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms. Publicly available source code of "/registered.php" discloses that path, allowing an attacker to attempt...
Lower than expected performance with AMD CPUs and DOD
Lower than expected performance when using AMD CPUs on the VDA and Citrix Display Only Driver DOD which could result in perceived lag. The lag might be more noticeable with multiple monitors and is only observed with AMD CPUs. These symptoms might be observed with CVAD versions prior to 2212 or...
AZL-56544 CVE-2024-56766 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmelpmecccreateuser The "user" pointer was converted from being allocated with kzalloc to being allocated by devmkzalloc. Calling kfreeuser will lead to a double free...
PT-2025-37930
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Firefox ESR versions prior to 140.3 Thunderbird versions prior to 143 Thunderbird versions prior to 140.3 Description The software contains a flaw. Recommendations Update Firefox to version 143 or later. Update...
webmin -- CGI Command Injection Remote Code Execution
Webmin reports: A less-privileged Webmin user can execute commands as root via a vulnerability in the shell autocomplete feature...
CVE-2024-50264 affecting package kernel for versions less than 5.15.173.1-1
CVE-2024-50264 affecting package kernel for versions less than 5.15.173.1-1. An upgraded version of the package is available that resolves this issue...
Malicious code in less-rhino (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73bfd1ed2aa0b8489fb39ddfc1ac2272730be0a23c877efe7ac2042216feb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11238 Malicious code in less-rhino (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73bfd1ed2aa0b8489fb39ddfc1ac2272730be0a23c877efe7ac2042216feb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3
CVE-2023-39325 affecting package multus for versions less than 4.0.2-3. A patched version of the package is available...
AZL-53977 CVE-2024-53257 affecting package vitess for versions less than 17.0.7-7
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
CVE-2024-2398 affecting package cmake for versions less than 3.21.4-14
CVE-2024-2398 affecting package cmake for versions less than 3.21.4-14. A patched version of the package is available...
CVE-2024-28182 affecting package cmake for versions less than 3.21.4-14
CVE-2024-28182 affecting package cmake for versions less than 3.21.4-14. A patched version of the package is available...
CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6
CVE-2023-6237 affecting package hvloader for versions less than 1.0.1-6. An upgraded version of the package is available that resolves this issue...
CVE-2024-8006 affecting package nmap for versions less than 7.95-2
CVE-2024-8006 affecting package nmap for versions less than 7.95-2. A patched version of the package is available...
CVE-2023-39804 affecting package tar for versions less than 1.34-3
CVE-2023-39804 affecting package tar for versions less than 1.34-3. A patched version of the package is available...
OESA-2024-2459 firefox security update
Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting...
WordPress GEO My WordPress plugin < 4.5 - Admin+ Arbitrary File Upload vulnerability
Admin+ Arbitrary File Upload vulnerability discovered by Michael Dyrna in WordPress Plugin GEO my WordPress versions 4.5...