5183 matches found
CraftCMS - Remote Code Execution
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...
CVE-2025-61456
🛡️ Divulgación de CVE: CVE-2025-61456 — XSS Reflejado en Proyecto de Comercio Electrónico Fecha de divulgación: 14 de octubre de 2025 ID de CVE: CVE-2025-61456 Severidad: MEDIA CVSS 6.1 🧩 Resumen Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en el Proyecto de Comercio Electrónico...
ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root
Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-33278 CVE-2026-33278 in unbound - Patched by Root
Root has patched CVE-2026-33278 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-0775 CVE-2026-0775 in npm - Patched by Root
Root has patched CVE-2026-0775 in the npm package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerability in binutils
A vulnerability has been discovered in GNU Binutils 2.45. This vulnerability affects the function bfdelfgcrecordvtentry in the file bfd/elflink.c of the Linker component. Manipulation of this function can lead to out-of-bounds reading. Access to local resources is required to carry out this attac...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A vulnerability, classified as critical, has been discovered in the Linux kernel. The issue affects the tsttimer function in the drivers/atm/idt77252.c file of the IPsec component. This vulnerability allows for manipulation leading to memory corruption after the function is freed. It is recommend...
Astra Linux – Vulnerability in TIF format
A vulnerability has been discovered in LibTIFF. It has been classified as critical. This vulnerability affects the TIFFReadRGBATileExt function in the file libtiff/tifgetimage.c. Manipulation of this function can lead to integer overflow. The attack can be initiated remotely. The exploit has been...
Astra Linux – Vulnerability in Ruby 2.5
REXML is an XML toolkit for Ruby. The REXML gem version 3.3.2 has a DoS vulnerability when it parses an XML document that contains many entity expansions using SAX2 or the pull parser API. The REXML gem versions 3.3.3 and later include a patch to fix this vulnerability...
Astra Linux – Vulnerability in ModSecurity-Apache
ModSecurity is an open-source, cross-platform Web application firewall WAF engine for Apache, IIS, and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in a specific scenario: when the payload’s content type is application/json, and there is at least one rule that...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A vulnerability, classified as problematic, has been identified in the Linux kernel. This issue affects the function nilfsattachlogwriter in the file fs/nilfs2/segment.c of the BPF component. The manipulation leading to this issue results in a memory leak. The attack can be initiated remotely. It...
PT-2026-91205
File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...
CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...
CVE-2026-66484 affecting package cpio for versions less than 2.14-2
CVE-2026-66484 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9. A patched version of the package is available...
CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...