13086 matches found
GHSA-FR62-MG2Q-7WQV In-memory stored Cross-site scripting (XSS) vulnerability in pineconesim
Impact The Pinecone Simulator pineconesim included in Pinecone up to commit https://github.com/matrix-org/pinecone/commit/ea4c33717fd74ef7d6f49490625a0fa10e3f5bbc is vulnerable to stored cross-site scripting. The payload storage is not permanent and will be wiped when restarting pineconsim. Patch...
Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
RHSA-2025:2130 Red Hat Security Advisory: emacs security update
Bulletin has no description...
RHSA-2025:2125 Red Hat Security Advisory: webkit2gtk3 security update
Bulletin has no description...
MAL-2025-2085 Malicious code in al-schematics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23abde2f15732ece6a95eca8e1692816abedb8fe470840b8d8fd6c1121f18d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2076 Malicious code in @cdplinetest/user-account-spec (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4413f7fdb56d00b76c80100b70ffb2b67150c303dbce426b298acddc1dad026e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2100 Malicious code in com.github-glitchenzo.nugetforunit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2641b4718102c38479e074fc167269436aadb2ff01a5b703a1c5e0a02fa09d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-27219 vulnerabilities
Vulnerabilities for packages: jruby, elasticsearch, logstash, ruby...
Linux Distros Unpatched Vulnerability : CVE-2012-4159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service...
CVE-2025-26319
FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments...
Linux Distros Unpatched Vulnerability : CVE-2018-15908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files...
GHSA-22H5-PQ3X-2GF2 vulnerabilities
Vulnerabilities for packages: elasticsearch, ruby3.3-uri, ruby3.4-rails, ruby3.4-uri, ruby3.2-faraday, logstash, ruby3.3-rails, kube-fluentd-operator, ruby, ruby3.2-rails, ruby3.2-uri, jruby...
K000150204: PostgreSQL vulnerability CVE-2015-3166
Security Advisory Description The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified...
CGA-R452-8RRV-V4RH
Bulletin has no description...
CGA-4GRP-JPPX-774M
Bulletin has no description...
CGA-VGP6-X3R2-97P6
Bulletin has no description...
GHSA-GH9Q-2XRM-X6QV vulnerabilities
Vulnerabilities for packages: jruby, elasticsearch, logstash, ruby...
GO-2025-3459 Remote code execution in Wazuh server in github.com/wazuh/wazuh
Remote code execution in Wazuh server in github.com/wazuh/wazuh...
GO-2025-3480 Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server
Mattermost allows reading arbitrary files related to importing boards in github.com/mattermost/mattermost-server...