17190 matches found
CVE-2025-31687 SpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SpamSpan filter allows Cross-Site Scripting XSS.This issue affects SpamSpan filter: from 0.0.0 before 3.2.1...
PT-2025-55366
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.4 Description An application may bypass launch constraint protections, allowing the execution of malicious code with elevated privileges. Recommendations Update to macOS Sequoia 15.4...
PT-2025-13791
Name of the Vulnerable Software and Affected Versions AWS Serverless Application Model Command Line Interface SAM CLI versions prior to 1.134.0 Description The issue arises when a build is completed with AWS Serverless Application Model Command Line Interface SAM CLI that includes symlinks. The...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A cross-site scripting vulnerability exists in OpenEMR versions prior to 7.0.3 th...
Drupal OAuth2 Client 跨站请求伪造漏洞
Drupal OAuth2 Client is an identity module for the Drupal community. A cross-site request forgery vulnerability exists in Drupal OAuth2 Client versions prior to 4.1.3 that stems from cross-site request forgery...
SUSE CVE-2025-29922
kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.26.3, the identified vulnerability allows creating or deleting an object via the APIExport VirtualWorkspace in any arbitrary target workspace for pre-existing resources. By...
DEBIAN-CVE-2025-30211
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names 64 characters provided in K...
Malicious code in msgspec-python313-pre (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2977 Malicious code in msgspec-python313-pre (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MeetMe 安全漏洞
MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09, which stems from a call forwarding configuration module credential disclosure that could allow access to critical assets via configuration files...
GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...
CVE-2025-28138
The TOTOLINK A800R V4.1.2cu.5137B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...
SUSE CVE-2025-30164
Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 vulnerability allows an attacker to craft a URL that, once visited by an authenticated user or one that is able to authenticate, allows to...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.6 that stems from an SQL injection in the nextPage parameter...
CVE-2025-28138: Improper Neutralization of Special Elements used in an OS Command
The TOTOLINK A800R V4.1.2cu.5137B20200730 were found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...
PT-2025-18442
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0+ Description The issue is related to an out-of-bounds shift when invalidating TLB in the Linux kernel. This occurs when the size of the range invalidated is larger than rounddown pow of twoULONG MAX, causi...
UBUNTU-CVE-2025-27833
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...
GLPI Inventory Plugin 安全漏洞
GLPI Inventory Plugin is an open source plugin for GLPI France. It is used to handle various types of tasks for GLPI agents. A security vulnerability exists in GLPI Inventory Plugin versions prior to 1.5.0 that stems from improper access control...
Artifex Ghostscript 安全漏洞
Artifex Ghostscript is a set of free software compiled by Artifex, Inc. based on Adobe, PostScript, and the Page Description Language for Portable Document Formatting PDL. A security vulnerability exists in Artifex Ghostscript versions prior to 10.05.0, which is caused by an oversized Type 4...
