CVE-2019-11819

Alkacon OpenCMS v10.5.4 and before is affected by CSV aka Excel Macro Injection in the module New User /opencms/system/workplace/admin/accounts/usernew.jsp via the First Name or Last Name...

CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2016-10715

The Artezio Kanban Board plugin 1.4 revision 1914 for Atlassian Jira has XSS via the Board Name in a Create New Board action, related to an artezioboard/mainPage.jspa?kanbanId=7/kanban-view URI...

CVE-2018-16639

Typesetter 5.1 allows XSS via the index.php/Admin LABEL parameter during new page creation...

CVE-2013-2317

The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window...

CVE-2012-1901

Multiple cross-site request forgery CSRF vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to 1 hijack the authentication of users for requests that change account settings via a request to index.php/profile-edit-save or 2 hijack the authentication of administrators for requests...

Credit Card Application Management System Cross-Site Scripting Vulnerability

Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...

thunderbird security update

128.10.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs...

Auto Taxi Stand Management System /admin/new-autoortaxi-entry-form.php File SQL Injection Vulnerability

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally entered SQL statement in the parameter drivername in the file...

SUSE CVE-2025-37941

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937xsoccodecprobe When sndsocdapmnewcontrols or sndsocdapmaddroutes fails, wcd937xsoccodecprobe returns without releasing 'wcd937x-clshinfo', which is allocated by...

SUSE CVE-2025-37956

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd server. It will cause a kernel oops from dalloc. This patch return the error when attempting to rename a file or directory with an empty new na...

firefox security update

128.10.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.10.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.10.1-1 - Update to 128.10.1...

USN-7519-1 mariadb-10.6 vulnerabilities

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...

USN-7519-1: MariaDB vulnerabilities

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...

Ubuntu 22.04 LTS : MariaDB vulnerabilities (USN-7519-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7519-1 advisory. Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security...

CVE-2025-4917

A vulnerability classified as critical has been found in PHPGurukul Auto Taxi Stand Management System 1.0. Affected is an unknown function of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument drivername leads to sql injection. It is possible to launch the attack...

PHPGurukul Credit Card Application Management System 安全漏洞

Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the file...

CVE-2023-7168

CVE-2023-7168 affects the WordPress plugin Better Follow Button for Jetpack (

S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit

While providing economic and software development value, software supply chains are only as strong as their weakest link. Over the past several years, there has been an exponential increase in cyberattacks, specifically targeting vulnerable links in critical software supply chains. These attacks...

kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()

A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...