13076 matches found
Malicious code in liquity2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3401 Malicious code in https-agen-chii (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3354 Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon (npm)
--- -= Per source details. Do not edit below this line.=-...
GO-2025-3623 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2025-3619 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server
Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...
GO-2025-3615 Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno
Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno...
GO-2025-3610 Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server
Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server...
GO-2025-3609 Mattermost Fails to Restrict Certain Operations on System Admins in github.com/mattermost/mattermost-server
Mattermost Fails to Restrict Certain Operations on System Admins in github.com/mattermost/mattermost-server...
GO-2025-3603 Query smuggling in ch-go library in github.com/ClickHouse/ch-go
Query smuggling in ch-go library in github.com/ClickHouse/ch-go...
CVE-2025-46246
CSRF in CM Answers plugin for WordPress (CVE-2025-46246) affects CM Answers versions up to 3.3.3. The issue enables cross-site request forgery via the CM Answers feature, potentially allowing an attacker to induce state-changing actions on behalf of an authenticated user. Public details come from...
BELL-CVE-2024-45720
Bulletin has no description...
Amazon Linux AMI : ghostscript (ALAS-2025-1967)
The version of ghostscript installed on the remote host is prior to 8.70-24.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1967 advisory. The calculation of the buffer size was being done with int values, and overflowing that data type. The bug has exist...
CGA-2RQF-FRWX-78CG
Bulletin has no description...
CGA-9342-W7RV-5V3G
Bulletin has no description...
OpenCMS cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
GHSA-847X-X4JG-6GF4 croogo Host header injection
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component...
CGA-FG5W-795X-JC4F
Bulletin has no description...
PT-2025-17466 · Panhainan · Ds-Java
Name of the Vulnerable Software and Affected Versions: panhainan DS-Java version 1.0 Description: A vulnerability has been found, classified as problematic, affecting an unknown function in the software. This issue leads to cross-site request forgery and can be exploited remotely. The exploit has...