13120 matches found
Amazon Linux AMI : ghostscript (ALAS-2025-1967)
The version of ghostscript installed on the remote host is prior to 8.70-24.34. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1967 advisory. The calculation of the buffer size was being done with int values, and overflowing that data type. The bug has exist...
CGA-2RQF-FRWX-78CG
Bulletin has no description...
CGA-9342-W7RV-5V3G
Bulletin has no description...
OpenCMS cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...
GHSA-847X-X4JG-6GF4 croogo Host header injection
An issue in croogo v.3.0.2 allows an attacker to perform Host header injection via the feed.rss component...
CGA-FG5W-795X-JC4F
Bulletin has no description...
PT-2025-17466
Name of the Vulnerable Software and Affected Versions panhainan DS-Java version 1.0 Description A vulnerability has been found, classified as problematic, affecting an unknown function in the software. This issue leads to cross-site request forgery and can be exploited remotely. The exploit has...
DLA-4132-1 erlang - security update
Bulletin has no description...
QMarkdown Cross-Site Scripting (XSS) vulnerability
QMarkdown aka quasar-ui-qmarkdown before 2.0.5 allows XSS via headers even when when no-html is set...
GHSA-WM65-PH3W-587C QMarkdown Cross-Site Scripting (XSS) vulnerability
QMarkdown aka quasar-ui-qmarkdown before 2.0.5 allows XSS via headers even when when no-html is set...
MAL-2025-4238 Malicious code in reqinstall (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 fabb4dfb4f519f848a714f96e09e2b5fbb289ffdd8cd86fc13c8fbf49b539962 Campaign is split into multiple packages that altogether exfiltrates data from desktop Telegram application. 1. "pyapiepo" is a cover package that provides som...
MAL-2025-3277 Malicious code in studocu-extension-pack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65c603a493cae2050aa25da30a9442d60b84baa80985df69af20af3e08fc9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-43963
In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...
CGA-PVVW-2F6C-24GQ
Bulletin has no description...
CGA-XQRG-CH4R-2CX3
Bulletin has no description...
CGA-X79W-FGVR-FC4F
Bulletin has no description...
CGA-P49M-FF3G-VHM2
Bulletin has no description...
CGA-MR52-5QXJ-V6RX
Bulletin has no description...