10919 matches found
GHSA-V2J8-2Q45-8JCQ vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
RHEL 8 : firefox update (Important) (RHSA-2024:6850)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6850 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. For more details about the...
GHSA-F9JC-68CV-WP63 vulnerabilities
Vulnerabilities for packages: nodejs...
Security Bulletin: IBM Application Modernization Accelerator is vulnerable to multiple vulnerabilities found in Java and Node.js
Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator CVE-2025-26791, CVE-2025-1470, CVE-2025-1471. Vulnerability Details CVEID:CVE-2025-26791 DESCRIPTION: DOMPurify before 3.2.4 has an incorrect template literal regular expression,...
GHSA-4W4V-5HC9-XRR2 vulnerabilities
Vulnerabilities for packages: solr...
GHSA-M9GF-397R-HWPG vulnerabilities
Vulnerabilities for packages: solr...
OPENSUSE-SU-2025:14918-1 warewulf4-4.6.0-2.1 on GA media
These are all security issues fixed in the warewulf4-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14917-1 nodejs-electron-33.4.6-1.1 on GA media
These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-4JWC-W2HC-78QV vulnerabilities
Vulnerabilities for packages: buck2, parseable, wash, wadm, atuin, qdrant...
CVE-2019-13029
Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...
CVE-2025-22228
A flaw was found in the spring-security-core password encoder. This vulnerability allows incorrect password matching via input manipulation. Mitigation Red Hat Product Security does not have a recommended mitigation at this time...
GHSA-8VGW-P6QM-5GR7 Flask-CORS allows for inconsistent CORS matching
A vulnerability in corydolphin/flask-cors version 5.0.1 allows for inconsistent CORS matching due to the handling of the '+' character in URL paths. The request.path is passed through the unquoteplus function, which converts the '+' character to a space ' '. This behavior leads to incorrect path...
CVE-2024-8024
A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...
CVE-2024-7039
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
GHSA-P4QJ-763M-FFG3 vulnerabilities
Vulnerabilities for packages: clamav...
GHSA-P53J-G8PW-4W5F vulnerabilities
Vulnerabilities for packages: gradle, jenkins, thingsboard...
Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2025-079-01)
The version of libarchive installed on the remote host is prior to 3.7.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-079-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
OPENSUSE-SU-2025:14912-1 mercurial-6.9.4-1.1 on GA media
These are all security issues fixed in the mercurial-6.9.4-1.1 package on the GA media of openSUSE Tumbleweed...