83307 matches found
GHSA-2CCP-VQMV-4R4X S3Proxy allows insecure path traversal in filesystem and filesystem-nio2 storage backends
Impact Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to authenticated clients. Patches Upgrade to S3Proxy 2.6.0 which includes apache/jclouds@b0819e0ef5e08c792a4d1724b938714ce9503aa3 and 86b6ee4749aa163a78e7898efc063617ed171980. Workarounds...
CVE-2024-49843
creationtimestamp| type| source ---|---|--- 2025-02-03 17:17:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2cbpxft2b 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c 2025-02-03 20:03:17+00:00| seen|...
CVE-2024-49839
creationtimestamp| type| source ---|---|--- 2025-02-03 17:17:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2c4wcfx2c 2025-02-03 17:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhc4lecd7c2g 2025-02-03 18:48:52+00:00| seen|...
CVE-2024-38420
creationtimestamp| type| source ---|---|--- 2025-02-03 17:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc2ayh4nh2i 2025-02-03 17:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhc4lei6qz2k 2025-02-03 18:48:49+00:00| seen|...
WordPress Child Themes Helper plugin <= 2.2.7 - CSRF to Arbitrary File Deletion vulnerability
CSRF to Arbitrary File Deletion vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin Child Themes Helper versions = 2.2.7...
CVE-2025-23984
creationtimestamp| type| source ---|---|--- 2025-02-03 15:17:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtmqhbm32j 2025-02-03 16:55:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113941003615740521...
CVE-2025-23747
creationtimestamp| type| source ---|---|--- 2025-02-03 15:17:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtmbnjsn2f 2025-02-03 16:25:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113940885558837177 2025-08-26 18:36:19+00:00| seen|...
coachdd.dek-d.com Cross Site Scripting vulnerability OBB-4020203
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security update for kubevirt
This update for kubevirt fixes the following issues: Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 Fix DV error report via VM printable status Fix permission error in storage...
SUSE-SU-2025:20054-1 Security update for kubevirt
This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...
OSV-2025-90 Null-dereference READ in ubsan_GetStackTrace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393411531 Crash type: Null-dereference READ Crash state: ubsanGetStackTrace...
CVE-2021-33357
creationtimestamp| type| source ---|---|--- 2025-02-03 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-03 2025-02-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-08 2026-04-10 00:00:00+00:00| seen| The Shadowserver...
PT-2025-20512
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was found in the pidff find fields function. This function could trigger a null pointer dereference when searching for a report that isn't implemented on...
OSV-2025-88 Segv on unknown address in ___interceptor_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393435814 Crash type: Segv on unknown address Crash state: interceptorfree ndpifreeflowdata ndpifreeflow...
OSV-2025-84 Segv on unknown address in Flow::processExtraDissectedInformation
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393435813 Crash type: Segv on unknown address Crash state: Flow::processExtraDissectedInformation Flow::setExtraDissectionCompleted Flow::endProtocolDissection...
OSV-2025-81 Segv on unknown address in ndpi_serialize_string_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393404264 Crash type: Segv on unknown address Crash state: ndpiserializestringstring ndpidpi2json fuzzprocesspacket.c...
OSV-2025-80 Segv on unknown address in ndpi_snprintf
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393420192 Crash type: Segv on unknown address Crash state: ndpisnprintf processndpicollectedinfo ndpiworkflowprocesspacket...
CVE-2024-35945
creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/XyFUx0GNR3JVtlzThiA7RUFoQmHuhFU5YDdVaNJqy-V91IQ 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-0945
creationtimestamp| type| source ---|---|--- 2025-02-01 15:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4skmaksv2h 2025-02-01 16:16:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3769 2025-02-01 17:25:48+00:00|...