13073 matches found
MINI-7Q4G-J4WG-WRG6
Bulletin has no description...
MINI-2RRJ-RGVV-662X
Bulletin has no description...
MINI-X9QH-FV6H-PJ45
Bulletin has no description...
CVE-2025-47917
Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument that is documented as an output argument. The documentation does not suggest that the function...
MAL-2025-6099 Malicious code in ipp-auth-service-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b42b5695779161ac5d3618b146cd263b9f17a9c1fe517abd5efff7b3ecdc97 Any computer that has this package installed or running should be considered...
CGA-P5QM-HR59-M2MH
Bulletin has no description...
MINI-9H7J-MXXH-8Q3Q
Bulletin has no description...
MINI-7PWW-QQ5P-9VCV
Bulletin has no description...
MINI-6RQ2-9588-G8GV
Bulletin has no description...
GHSA-6V2P-P543-PHR9 golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-53888 RIOT-OS has an ineffective size check that can lead to buffer overflow in link layer address filter /sys/net/link_layer/l2filter/l2filter.c
RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with assert can lead to buffer overflow in versions up to and including 2025.04. Assertions are usually compiled out in production builds. If assertions are the only defense against...
MAL-2025-6070 Malicious code in ably-realtime (npm)
The package communicates with a domain associated with malicious activity...
GHSA-WVW2-3JH4-4C39 Mattermost Path Traversal vulnerability
Mattermost versions 10.8.x = 10.8.1, 10.7.x = 10.7.3, 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal...
RHSA-2025:11373 Red Hat Security Advisory: glib2 security update
Bulletin has no description...
CGA-C923-6H8P-37XC
Bulletin has no description...
Improper Access Control
Directus is vulnerable to Improper Access Control. The vulnerability is due to manual trigger Flows not validating user permissions for the payload items, which allows an attacker to execute unauthorized tasks or access restricted collections/items without proper authentication or access rights...
WordPress Useful Tab Block plugin <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via className Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Useful Tab Block versions = 1.3.2...
WordPress Map My Locations plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Map My Locations versions = 1.1...
PT-2025-30077 · Unknown · Agorum Core Open
Name of the Vulnerable Software and Affected Versions: Agorum core open versions 11.9.2 and 11.10.1 Description: The software stores credentials in plaintext. Recommendations: Apply necessary measures to prevent the storage of credentials in plaintext for Agorum core open version 11.9.2. Apply...