10885 matches found
GHSA-JRG7-VPCV-RF8R vulnerabilities
Vulnerabilities for packages: samba...
GHSA-V2J8-2Q45-8JCQ vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-65FJ-56W9-GR9R vulnerabilities
Vulnerabilities for packages: apache2...
GHSA-V2J8-2Q45-8JCQ vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-P5HW-4FXJ-G4X6 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
RHEL 8 : firefox update (Important) (RHSA-2024:6850)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6850 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. For more details about the...
GHSA-F9JC-68CV-WP63 vulnerabilities
Vulnerabilities for packages: nodejs...
Security Bulletin: IBM Application Modernization Accelerator is vulnerable to multiple vulnerabilities found in Java and Node.js
Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator CVE-2025-26791, CVE-2025-1470, CVE-2025-1471. Vulnerability Details CVEID:CVE-2025-26791 DESCRIPTION: DOMPurify before 3.2.4 has an incorrect template literal regular expression,...
GHSA-M9GF-397R-HWPG vulnerabilities
Vulnerabilities for packages: solr...
GHSA-4W4V-5HC9-XRR2 vulnerabilities
Vulnerabilities for packages: solr...
OPENSUSE-SU-2025:14918-1 warewulf4-4.6.0-2.1 on GA media
These are all security issues fixed in the warewulf4-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14917-1 nodejs-electron-33.4.6-1.1 on GA media
These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-4JWC-W2HC-78QV vulnerabilities
Vulnerabilities for packages: qdrant, atuin, wash, wadm, buck2, parseable...
CVE-2019-13029
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
CVE-2025-22228
A flaw was found in the spring-security-core password encoder. This vulnerability allows incorrect password matching via input manipulation. Mitigation Red Hat Product Security does not have a recommended mitigation at this time...
GHSA-8VGW-P6QM-5GR7 Flask-CORS allows for inconsistent CORS matching
A vulnerability in corydolphin/flask-cors version 5.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquoteplus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path...
CVE-2024-8024
A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...
CVE-2024-7039
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...