61 matches found
CVE-2025-52968
xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...
OpenSCAP Libraries 1.3.12
The openscap project is a set of open source libraries that support the SCAP Security Content Automation Protocol set of standards from NIST. It supports CPE, CCE, CVE, CVSS, OVAL, and XCCDF...
Linux Distros Unpatched Vulnerability : CVE-2015-7317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated users to edit Kupu settings...
Photon OS 3.0: Open PHSA-2023-3.0-0642
An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0642. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Open PHSA-2023-3.0-0675
An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0675. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2024-4988 · Php +2 · Php +2
Name of the Vulnerable Software and Affected Versions: PHP versions 8.1. before 8.1.29 PHP versions 8.2. before 8.2.20 PHP versions 8.3. before 8.3.8 Description: The issue arises from insufficient escaping when using the proc open function with array syntax, allowing a malicious user to supply...
search.finnstyle.com Cross Site Scripting vulnerability OBB-3885157
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vivienberger.de Improper Access Control vulnerability OBB-3820539
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Announcing Vulnerability Scanning in Wordfence CLI 2.0.1 “Voodoo Child”
Note: If youre a WordPress user, we recommend the Wordfence Security Plugin which provides a robust and complete set of security controls for WordPress websites. If you host WordPress servers and need high performance malware and vulnerability scanning on the command line, read on! Our mission at...
The vulnerability of the scanning and management tools in OpenVAS’s MariaDB database system allows attackers to cause service interruptions.
The vulnerability of the scanning and vulnerability management tool in the OpenVAS database management system, MariaDB, is related to an uncontrolled resource consumption when connected to ports 3306 and 4567. Exploiting this vulnerability could allow a malicious actor to cause service...
UBUNTU-CVE-2023-5157
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service...
irekrut.cz Cross Site Scripting vulnerability OBB-3522420
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
improvidence.fr Cross Site Scripting vulnerability OBB-3435499
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-29053
A vulnerability has been identified in JT Open All versions V11.3.2.0, JT Utilities All versions V13.3.0.0. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the...
GHSA-X43G-GJ9X-838X PhantomJS Arbitrary File Read
PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. The vulnerability exists in the page.open function of the webpage module, which loads a specified URL and calls a given callback. An attacker can supply a specially crafted HT...
DuckDuckGo application 安全漏洞
Duckduckgo DuckDuckGo application is a privacy web browser application for mobile by DuckDuckGo Duckduckgo, Inc. A security vulnerability exists in DuckDuckGo browser 7.64.4 on iOS, which stems from incorrect handling of the JavaScript window.open function used to open a secondary browser window...
The vulnerability of the `ntfs inode_real_open` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the ntfs inoderealopen function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
conikal.com Improper Access Control vulnerability OBB-2168061
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the `open_generic_xdg_mime` function in the xdg-open component of the Xdg-utils suite, a set of tools for integrating applications into the Xdg environment, arises due to insufficient handling of input data cleaning. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the opengenericxdgmime function in the xdg-open component, a toolset for integrating applications into the Xdg environment, is related to incorrect handling of local variables when using the dash library. Exploiting this vulnerability can allow an attacker to gain access to...
