12684 matches found
Apache Geode web-api is vulnerable to Cross-site Scripting
Malicious script injection 'Cross-site Scripting' vulnerability in Apache Geode web-api REST. This vulnerability allows an attacker that tricks a logged-in user into clicking a specially-crafted link to execute code on the returned page, which could lead to theft of the user's session information...
[SECURITY] [DLA 4331-1] https-everywhere security update
Debian LTS Advisory DLA-4331-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 14, 2025 https://wiki.debian.org/LTS Package : https-everywhere Version : 2025.10.14-0+deb11u1 Debian Bug : 1118030 1118045 The Firefox extension HTTPS Everywhere used to enforc...
KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025
None None...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the AccountEntriesAdminPortletaddressId parameter. An attacker can access address information belonging to other accounts by specifying arbitrary identifiers. Remediation Upgrade...
EUVD-2025-33706
Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via the LoadBlob function. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting specially crafted text input that triggers...
CVE-2025-61672
Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in Synapse 1.139.0 allow an attacker registered on the victim homeserver to degrade federation functionality, unpredictably breaking outbound federation to other homeserver...
CVE-2025-11462 Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...
EUVD-2010-1030
Malware in sbrugna...
EUVD-2019-11533
Malware in sbrugna...
EUVD-2014-1251
Malware in sbrugna...
EUVD-2021-26676
Malware in sbrugna...
EUVD-2008-1008
Malware in sbrugna...
EUVD-2021-25597
Malware in sbrugna...
EUVD-2015-1088
Malware in sbrugna...
EUVD-2021-19465
Malware in sbrugna...
EUVD-2021-1101
Malware in sbrugna...
EUVD-2014-1255
Malware in sbrugna...