1807 matches found
CVE-2023-45822
Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which a default unsafe rego built-in was allowed to be used when...
Few-Shot Learning for Security Bug Report Identification
Security bug reports require prompt identification to minimize the window of vulnerability in software systems. Traditional machine learning ML techniques for classifying bug reports to identify security bug reports rely heavily on large amounts of labeled data. However, datasets for security bug...
EUVD-2026-0818
ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds...
EUVD-2025-202429
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient protection against /html injection, which...
NLTK – Multiple CorpusReader classes allow Arbitrary File Read via Path Traversal
Description Please enter a description of the vulnerability. Several corpus reader classes in NLTK accept file paths without proper sanitization or path validation. If attackers can control corpus filenames or file inputs common in ML APIs, upload-based NLP pipelines, chatbots, they can traverse...
UBUNTU-CVE-2025-64517
sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...
Siemens SIMATIC Devices Use of Uninitialized Variable (CVE-2024-35888)
In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspanbasehdr is present in skb-head. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc...
CVE-2025-11679
CVE-2025-11679 affects warmcat libwebsockets where an out-of-bounds read in lws_upng_emit_next_line can occur if LWS_WITH_UPNG is enabled and the HTML display stack is used, potentially crashing a heap-allocated buffer when a crafted PNG with large height is viewed. Public sources (Fedora, Debian...
CVE-2025-25298 Missing Maximum Password Length Validation in Strapi Password Hashing
Strapi is an open source headless CMS. The @strapi/core package before version 5.10.3 does not enforce a maximum password length when using bcryptjs for password hashing. Bcryptjs ignores any bytes beyond 72, so passwords longer than 72 bytes are silently truncated. A user can create an account...
PT-2025-41720
Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1 Description An authenticated user on the network may be able to delete comments from other users. This is due to client-side enforcement of server-side security...
lemlist: Unauthorized Password Reset Allows Account Takeover Across Tenant Boundaries
An authorization issue was discovered in the application that allowed a tenant admin to change the password of another user within the same tenant, including invited agency accounts. The victim had to first accept the invitation before the attacker could proceed. The issue could allow unintended...
EUVD-2017-7821
Malware in sbrugna...
EUVD-2005-4409
Malware in sbrugna...
EUVD-2016-4949
Malware in sbrugna...
EUVD-2016-0831
Malware in sbrugna...
EUVD-2021-19481
Malware in sbrugna...
EUVD-2021-19456
Malware in sbrugna...
EUVD-2016-4898
Malware in sbrugna...