8470 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-22061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning...
Linux Distros Unpatched Vulnerability : CVE-2021-47354
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sched: Avoid data corruptions Wait for all dependencies of a job to complete before killing it to avoid data corruptions. CVE-2021-47354 Note that Nessus...
CVE-2025-8580
creationtimestamp| type| source ---|---|--- 2025-08-08 10:34:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3lvv2ihpdt42u...
CVE-2025-6013
creationtimestamp| type| source ---|---|--- 2025-08-08 02:59:34+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvub3qyqck2h 2025-08-22 13:26:18+00:00| seen| MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80...
Linux Distros Unpatched Vulnerability : CVE-2025-7783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program files...
Linux Distros Unpatched Vulnerability : CVE-2024-46846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtime PM / system PM handling Commit e882575efc77 spi:...
Linux Distros Unpatched Vulnerability : CVE-2022-49951
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix use-after-free during unregister In the following code within...
Linux Distros Unpatched Vulnerability : CVE-2020-26953
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or...
Rockwell Automation Arena
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...
CVE-2025-51532
creationtimestamp| type| source ---|---|--- 2025-08-06 17:56:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqsb5mojc2a...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
Django Error Reporting Data Compromise
The vulnerability of the Django web application framework is related to shortcomings in the error reporting mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the information being protected...
Unisite CMS security vulnerability
Unisite CMS is a content management system from the Russian company Unisite. A security vulnerability exists in Unisite CMS version 5.0, which stems from the presence of stored cross-site scripting in the reporting function that could lead to administrator session hijacking and remote code...
CVE-2025-30192
creationtimestamp| type| source ---|---|--- 2025-07-31 20:45:07+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbyvq3vbc2c...
CVE-2025-38468
creationtimestamp| type| source ---|---|--- 2025-07-30 13:59:49+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lv6rryown22e...
Policy and Disclosure: 2025 Edition
Posted by Tim Willis, Google Project Zero In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes...
CVE-2025-23278
creationtimestamp| type| source ---|---|--- 2025-07-25 03:34:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4iqa7jk2g 2025-08-02 20:17:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvgycns3d22j 2025-08-02 23:43:01+00:00| seen|...
Transcript Franking for Encrypted Messaging
Message franking is an indispensable abuse mitigation tool for end-to-end encrypted E2EE messaging platforms. With it, users who receive harmful content can securely report that content to platform moderators. However, while real-world deployments of reporting require the disclosure of multiple...
firefox: thunderbird: Incorrect URL stripping in CSP reports
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...