54123 matches found
SUSE-SU-2025:21062-1 Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54770: Missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-54771: grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Out-of-bounds write in grubusbgetstring...
CVE-2025-40210
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
EUVD-2025-198289
Malicious code in @kiwiiw/ez-lib npm...
EUVD-2025-198094
The Itel DAB MUX IDMUX build c041640a is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the...
CVE-2025-9312
creationtimestamp| type| source ---|---|--- 2025-11-18 13:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vt5jdk7326...
PT-2025-47329
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.11 Mattermost versions 10.11.x through 10.11.3 Description The Mattermost application does not properly enforce access permissions within the Agents plugin. This allows other users to determine when user...
Student Information System editprofile.php File Cross-Site Scripting Vulnerability
Student Information System is a student information system. A cross-site scripting vulnerability exists in the Student Information System, which originates from an unspecified function in the /editprofile.php file that improperly handles user input. An attacker can exploit this vulnerability by...
CVE-2025-40936
creationtimestamp| type| source ---|---|--- 2025-11-17 13:41:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5te34vmhp2b 2025-12-09 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1042/ 2026-02-12 11:00:00+00:00| seen|...
CVE-2025-64703
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations by Python code in tool module, although the process run in sandbox. Version 2.3.1 fixes the issue...
SUSE-SU-2025:21057-1 Security update for containerd
This update for containerd fixes the following issues: - CVE-2024-25621: Fixed overly broad default permission vulnerability bsc1253126. - CVE-2025-64329: Fixed goroutine leaks can lead to memory exhaustion on the host bsc1253132...
EUVD-2025-176163
Malicious code in subduction-pulsar-yaml-janus npm...
EUVD-2025-177397
Malicious code in oscillation-oscillation-accretion-comet npm...
EUVD-2025-177670
Malicious code in neptune-barnard-mdx-less-loader npm...
EUVD-2025-180284
Malicious code in astrometry-passport-less-filament npm...
EUVD-2025-177306
Malicious code in passport-fornax-phenomic-helmet npm...
EUVD-2025-177095
Malicious code in postcss-loader-hapi-publish-event npm...
EUVD-2025-179453
Malicious code in csv-envconfig-achernar-stratigraphy npm...
EUVD-2025-179376
Malicious code in decompress-simple-lambda-container-meta npm...