1996 matches found
KB5066586: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2025)
The remote Windows host is missing security update 5066586. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
CVE-2025-61689
HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP response splitting and header...
Fedora 42 : prometheus-podman-exporter (2025-b4003be6a2)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b4003be6a2 advisory. release v1.19.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
happy-dom 代码注入漏洞
happy-dom is a JavaScript implementation of a web browser without a graphical user interface by the individual developer David Ortner. A code injection vulnerability exists in happy-dom version 19 and earlier, which stems from insufficient isolation of the Node.js VM Context environment and could...
Mageia: Security Advisory (MGASA-2025-0236)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414365 advisory. drivers/usb/mon/monbin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user- space client to corrupt the monitor's internal memory...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414378 advisory. An issue was discovered in the Linux kernel before 5.19. In pxa3xxgcuwrite in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of sizet vers...
EUVD-2025-24809
Malicious code in bioql PyPI...
EUVD-2025-24950
Malicious code in bioql PyPI...
EUVD-2025-29772
Malicious code in bioql PyPI...
EUVD-2025-29135
Malicious code in bioql PyPI...
EUVD-2025-24952
Malicious code in bioql PyPI...
EUVD-2025-24481
Malicious code in bioql PyPI...
EUVD-2025-25895
Malicious code in bioql PyPI...
EUVD-2025-24953
Malicious code in bioql PyPI...
Volto 代码问题漏洞
Volto is a content management system open-sourced by the Plone Foundation. A code issue vulnerability exists in Volto versions 16.34.0 and earlier, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, which stems from the fact that accessing a specific URL by...
laravel-auth0 SDK Does Not Properly Handle File Types in Bulk User Import
Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
Impact When visiting a specific URL, an anonymous user could cause the NodeJS server part of Volto to quit with an error. Patches The problem has been patched and the patch has been backported to Volto major versions down until 16. It is advised to upgrade to the latest patch release of your...
PT-2025-40309
Name of the Vulnerable Software and Affected Versions Volto versions 16.34.0 through 16.34.1 Volto versions 17.0.0 through 17.22.1 Volto versions 18.0.0 through 18.27.1 Volto versions 19.0.0-alpha.1 through 19.0.0-alpha.5 Description An anonymous user can cause the NodeJS server part of Volto to...