13073 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a stack overflow vulnerability in libexpat library [CVE-2024-8176]
Summary IBM Watson Speech Services Cartridge is vulnerable to a stack overflow vulnerability in libexpat library, due to the way it handles recursive entity expansion in XML documents CVE-2024-8176. The libexpat library is used as part of our speech utilities. This vulnerabilitiy has been...
CVE-2025-48919 Simple Klaro - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-073
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Simple Klaro allows Cross-Site Scripting XSS.This issue affects Simple Klaro: from 0.0.0 before 1.10.0...
CGA-JH7V-64RF-8XMP
Bulletin has no description...
GHSA-8PCP-R83J-FC92 Salt vulnerable to directory traversal attack in file receiving method
Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...
MAL-2025-5051 Malicious code in react-expiry-date (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 744273ea7bca5335d9f20514a81c835c0cad1558b2b206721aed050a41f0acea Any computer that has this package installed or running should be considered...
MINI-VR82-HF5X-MV7M
Bulletin has no description...
MAL-2025-5046 Malicious code in passeiaqui (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5054 Malicious code in recoil-handler (npm)
The package communicates with a domain associated with malicious activity...
CGA-JMR7-VVHV-6H2M
Bulletin has no description...
PT-2025-25451 · Undefined · Undefined
CVE-2025-46167 JSTargetFuzzer-V2 JSTargetFuzzer-v2.0 is a fuzzing approach that incorporates novel history-based guidance, using tailored seeds and custom mutation operators. It is built on top of the Fuzzilli fra... https://t.co/TUq3tMABu2...
WordPress Responsive Blocks plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Responsive Blocks versions = 2.0.5...
CGA-X9MJ-GPVV-MX29
Bulletin has no description...
MINI-6752-XVF4-9X9X
Bulletin has no description...
MINI-4JX8-MV5M-V9M8
Bulletin has no description...
MINI-P2QJ-C8MW-3M7H
Bulletin has no description...
CVE-2025-1516 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 8.7 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Improper input validation in Tokens Names could be used to trigger a denial of service...
MINI-R9PQ-9C7C-F6XQ
Bulletin has no description...
MINI-577Q-GWPM-5335
Bulletin has no description...
Regular Expression Denial Of Service (ReDoS)
brace-expansion is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient handling of complex or nested patterns in regular expressions within the expand function of the file index.js, allows an attacker to remotely cause excessive resource consumption...