1219 matches found
MiracleLinux 8 : libcmis-0.5.2-1.el8, liborcus-0.14.1-1.el8, libreoffice-6.3.6.2-3.el8 (AXSA:2021-1445:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1445:01 advisory. libreoffice: 'stealth mode' remote resource restrictions bypass CVE-2020-12802 libreoffice: forms allowed to be submitted to any URI could result in...
The vulnerability of Google Chrome’s web service allows a hacker to circumvent existing security restrictions.
The vulnerability of Google Chrome’s web service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
MiracleLinux 4 : xinetd-2.3.14-38.AXS4 (AXSA:2013-131:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-131:01 advisory. Xinetd is a secure replacement for inetd, the Internet services daemon. Xinetd provides access control for all services based on the address of the remote hos...
MiracleLinux 4 : dovecot-2.0.9-5.AXS4 (AXSA:2013-272:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-272:01 advisory. Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mai...
CVE-2025-11837
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...
CVE-2025-11837
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...
CVE-2025-11837 Malware Remover
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...
CVE-2025-11837 Malware Remover
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later...
CVE-2025-11837
CVE-2025-11837 affects Malware Remover and is due to an improper control of generation of code vulnerability. Public sources describe remote exploitation (attack vector: NETWORK) with no user interaction, enabling attackers to bypass protection mechanisms and impact confidentiality, integrity, an...
CVE-2025-14703
A vulnerability has been found in Shiguangwu sgwbox N3 2.0.25. The affected element is an unknown function of the file /fsnotify of the component POST Message Handler. The manipulation of the argument token leads to improper authentication. It is possible to initiate the attack remotely. The...
The vulnerability of the bound_principal_iam component in the Access Control System Vault and the Vault Enterprise platform for archiving corporate information allows a perpetrator to circumvent existing security restrictions.
The vulnerability of the boundprincipaliam component in the Access Control System Vault and the Corporate Information Archiving Platform Vault Enterprise involves exploiting authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumven...
The vulnerability of the virtual learning environment Moodle, related to incorrect authorization, allows a violator to circumvent existing security restrictions.
The vulnerability in the virtual learning environment Moodle is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
CVE-2025-13992
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the asn1.validate() function in the Forge/lib/asn1.js set of cryptographic tools and tools for developing web applications allows a perpetrator to circumvent security restrictions.
The vulnerability of the asn1.validate function in the Forge/lib/asn1.js set of cryptographic tools and tools for developing web applications is related to the occurrence of interpretation conflicts when processing data based on the ASN.1 standard. Exploiting this vulnerability could allow an...
CVE-2025-13992
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-66030
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...
ROS-20251125-05
A vulnerability in HashiCorp's Vault and Vault Enterprise enterprise information archiving platforms is related to authentication bypass using an alternate path or channel in AWS authentication method AWS authentication method. Exploitation of the vulnerability could allow an attacker acting...
Vulnerability of the DOM component: Available in Mozilla Firefox and Firefox ESR browsers, this component allows attackers to bypass existing security restrictions.
Vulnerability of the DOM component: Core and HTML browsers like Mozilla Firefox and Firefox ESR are vulnerable due to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...
