5185 matches found
CVE-2025-61456
🛡️ CVE 披露：CVE-2025-61456 — 电子商务项目中的反射型 XSS 披露日期： 2025 年 10 月 14 日 CVE ID： CVE-2025-61456 严重性： 中危（CVSS 6.1） 🧩 摘要 E-commerce Project v1.0 中存在一个反射型跨站脚本（XSS）漏洞，具体位于 index.php 端点。URL 路径参数中的未净化输入被直接反射回响应 HTML 中，攻击者可借此在访问恶意链接或提交构造请求的用户浏览器中执行任意 JavaScript。 该问题已被分配标识符 CVE-2025-61456 。在披露时，供应商尚未发布补丁 。 📦...
ROOT-OS-ALPINE-320-CVE-2024-32487 CVE-2024-32487 in less - Patched by Root
Root has patched CVE-2024-32487 in the less package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-25210 CVE-2026-25210 in expat - Patched by Root
Root has patched CVE-2026-25210 in the expat package for Root:Debian:12. Multiple fixed versions available...
CraftCMS - Remote Code Execution
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...
Linux Distros Unpatched Vulnerability : CVE-2026-88372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files. CVE-2026-88372 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2026-98017
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an...
ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root
Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-33278 CVE-2026-33278 in unbound - Patched by Root
Root has patched CVE-2026-33278 in the unbound package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-0775 CVE-2026-0775 in npm - Patched by Root
Root has patched CVE-2026-0775 in the npm package for Root:npm. Multiple fixed versions available...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A vulnerability, classified as critical, has been discovered in the Linux kernel. The issue affects the tsttimer function in the drivers/atm/idt77252.c file of the IPsec component. This vulnerability allows for manipulation leading to memory corruption after the function is freed. It is recommend...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
A vulnerability, classified as problematic, has been identified in the Linux kernel. This issue affects the function nilfsattachlogwriter in the file fs/nilfs2/segment.c of the BPF component. The manipulation leading to this issue results in a memory leak. The attack can be initiated remotely. It...
Astra Linux – Vulnerability in ModSecurity-Apache
ModSecurity is an open-source, cross-platform Web application firewall WAF engine for Apache, IIS, and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in a specific scenario: when the payload’s content type is application/json, and there is at least one rule that...
Astra Linux – Vulnerability in TIF format
A vulnerability has been discovered in LibTIFF. It has been classified as critical. This vulnerability affects the TIFFReadRGBATileExt function in the file libtiff/tifgetimage.c. Manipulation of this function can lead to integer overflow. The attack can be initiated remotely. The exploit has been...
PT-2026-91205
File Browser versions = 2.5.0 and = 2.63.23 contain an incorrect authorization flaw in the direct-upload endpoint resourcePostHandler in http/resource.go. Unlike the TUS upload handler, the direct-upload handler does not reject a target that is an existing directory; a POST with ?override=true...
CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...
CVE-2026-66484 affecting package cpio for versions less than 2.14-2
CVE-2026-66484 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9. A patched version of the package is available...