13073 matches found
RHSA-2025:8201 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Bulletin has no description...
WordPress Flynax Bridge plugin <= 2.2.0 - Unauthenticated Limited Privilege Escalation vulnerability
Unauthenticated Limited Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Flynax Bridge versions = 2.2.0...
COOKiES Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-075
This module provides a format filter, which allows you to "disable" certain HTML elements e.g. remove their src attribute specified by the user. These elements will be enabled again, once the COOKiES banner is accepted. The module doesn't sufficiently check whether to convert "data-src" attribute...
CVE-2025-32440 NetAlertX Vulnerable to Authentication Bypass
NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...
K000151516: Python urllib vulnerability CVE-2019-9947
Security Advisory Description An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n specifically in the...
RHSA-2025:8176 Red Hat Security Advisory: openldap security update
Bulletin has no description...
RHSA-2025:8142 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:8134 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
MAL-2025-5113 Malicious code in fernetpy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ccbbcfd921dcefb2809ba41756181682f7a04f1a9f701adcf0c37c9889d87a98 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...
XML External Entity (XXE) Injection
org.eclipse.jgit, org.eclipse.jgit is vulnerable to XML External Entity XXE attacks. The vulnerability is due to insecure handling of XML input by the ManifestParser and AmazonS3 classes when parsing XML files, allows an attacker to perform XML External Entity XXE attack...
OSV-2025-406 Security exception in com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420197344 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.JavaAstVisitor.getInnerBopAst java.base/java.util.stream.ReferencePipeline$3$1.accept...
Cloud Netscaler console security advisory scan stuck on In Progress
Trying to run the security advisory scan from cloud.com but the scan and it looks like the previous three scans are not completing, It is stuck on "In Progress."...
Security Vulnerabilities fixed in Firefox ESR 128.11 — Mozilla
A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. Error handling for script execution was incorrectly isolated from web content, which could ha...
Security Vulnerabilities fixed in Thunderbird 139 — Mozilla
A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. Error handling for script execution was incorrectly isolated from web content, which could ha...
CGA-P2X9-4WHH-95J4
Bulletin has no description...
CGA-Q48P-2QPP-M58H
Bulletin has no description...
CGA-MFCX-VCVM-458R
Bulletin has no description...
RHSA-2025:8133 Red Hat Security Advisory: kernel security update
Bulletin has no description...
MAL-2025-4481 Malicious code in ideals-services (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 865914eac562424883edf27e6b1aafbe401e4f61f0cf5dcee636e6b3dc0b60b2 Any computer that has this package installed or running should be considered...