82632 matches found
GHSA-G623-JCGG-MHMM vulnerabilities
Vulnerabilities for packages: argo-cd...
PT-2026-1700
Name of the Vulnerable Software and Affected Versions WebConsole affected versions not specified Description The Report Builder component stores user input directly into a web page and displays it to other users, potentially leading to a Cross-Site Scripting XSS attack. The scripts are executed...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000275 advisory. In parsehidreportdescriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an...
EUVD-2026-0970
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10184061; Issue ID: MSV-4712...
CVE-2025-52863
creationtimestamp| type| source ---|---|--- 2026-01-05 21:08:15+00:00| seen| Telegram/nm9du9wjltxMtcwJpPJKV121bbF8xLkPf7YZ6cUjHAdlMjM...
EUVD-2026-0859
flagd: Multiple Go Runtime CVEs Impact Security and Availability...
UBUNTU-CVE-2025-68751
In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpuvstl A false-positive kmsan report is detected when running ping command. An inline assembly instruction 'vstl' can write varied amount of bytes depending on value of 'index'...
EUVD-2026-0916
A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality of the file /admin/system/variableSave.do of the component System Variables Page. Performing a manipulation of the argument Description results in cross site scripting. The attac...
CVE-2025-15447
...
CVE-2025-15446
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor mentioned in the original disclosure filed a report that this issue affects a different vendor. The research...
SQL-Injection-Scanner
SQL-Injection-Scanner A Python-based SQL Injection vulnerabili...
defacemeter
DefaceMeter DefaceMeter is a small, static, browser-based pro...
OSV-2026-6 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472785101 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.primary...
OSV-2026-4 UNKNOWN READ in rb_managed_id_table_lookup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472871119 Crash type: UNKNOWN READ Crash state: rbmanagedidtablelookup vmlookupcc rbvmsearchmethodslowpath...
CVE-2025-15420
A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...
EUVD-2026-0031
A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
EUVD-2026-0288
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0307
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...