31063 matches found
Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive
Impact When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly recommended to bur...
CVE-2024-42516
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP...
CVE-2024-42516
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP...
CVE-2024-42516 Apache HTTP Server: HTTP response splitting
HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP...
CVE-2025-27614
Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script e.g., Bourne shell, Perl, Python, ... supplied by the attacker by invoking...
CVE-2025-46835
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permissio...
CVE-2025-46835 Git GUI can create and overwrite files for which the user has write permission
Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permissio...
CVE-2025-37749 affecting package kernel for versions less than 6.6.92.2-1
CVE-2025-37749 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7
CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7. A patched version of the package is available...
CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6
CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6. A patched version of the package is available...
CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1
CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1
CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-0568 affecting package php for versions less than 8.2.3-1
CVE-2023-0568 affecting package php for versions less than 8.2.3-1. A patched version of the package is available...
CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1
CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1. A patched version of the package is available...
CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3
CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3. A patched version of the package is available...
CVE-2023-28938 affecting package mdadm for versions less than 4.1-11
CVE-2023-28938 affecting package mdadm for versions less than 4.1-11. A patched version of the package is available...
CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6
CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6. A patched version of the package is available...
CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7
CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7. A patched version of the package is available...