8313 matches found
CVE-2013-2317
The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window...
CVE-2012-1901
Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...
Credit Card Application Management System Cross-Site Scripting Vulnerability
Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...
thunderbird security update
128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs...
Auto Taxi Stand Management System /admin/new-autoortaxi-entry-form.php File SQL Injection Vulnerability
Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally entered SQL statement in the parameter drivername in the file...
SUSE CVE-2025-37941
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937xsoccodecprobe When sndsocdapmnewcontrols or sndsocdapmaddroutes fails, wcd937xsoccodecprobe returns without releasing 'wcd937x-clshinfo', which is allocated by...
SUSE CVE-2025-37956
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from dalloc. This patch return the error when attempting to rename a file or directory with an empty new na...
firefox security update
128.10.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.10.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.10.1-1 - Update to 128.10.1...
USN-7519-1 mariadb-10.6 vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...
USN-7519-1: MariaDB vulnerabilities
Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...
Ubuntu 22.04 LTS : MariaDB vulnerabilities (USN-7519-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7519-1 advisory. Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security...
CVE-2025-4917
A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack...
PHPGurukul Credit Card Application Management System 安全漏洞
Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...
CVE-2023-7168
CVE-2023-7168 affects the WordPress plugin Better Follow Button for Jetpack (
S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit
While providing economic and software development value, software supply chains are only as strong as their weakest link. Over the past several years, there has been an exponential increase in cyberattacks, specifically targeting vulnerable links in critical software supply chains. These attacks...
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...
kernel: xen-netfront: Fix NULL sring after live migration
In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for each network sring to poll data to kernel The sring with source host is destroyed before live migration and new sring with target host is setup after live...
kernel: cifs: Fix memory and information leak in smb3_reconfigure()
A memory and information leak vulnerability was found in the Linux kernel's CIFS/SMB3 filesystem driver. When smb3reconfigure fails during smb3syncsessionctxpasswords, the newly allocated password buffers newpassword and newpassword2 are not freed or securely erased. This causes a memory leak and...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails CVE-2022-49168 In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio CVE-2022-49413 In the Linux...