13121 matches found
GHSA-3WHM-J4XM-RV8X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, falcoctl-fips, opa, aws-ebs-csi-driver, src, dynamic-localpv-provisioner-fips, crossplane-provider-aws-iam, extism, prometheus-blackbox-exporter, prometheus-elasticsearch-exporter, undock, sftpgo-plugin-auth,...
CGA-R46C-FG92-XCGH
Bulletin has no description...
openSUSE Security Advisory (SUSE-SU-2024:2939-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:3195-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-C33W-C8GH-Q3HF
Bulletin has no description...
CGA-2RMR-WMHC-2W99
Bulletin has no description...
CVE-2025-26527
Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...
Moodle allows teachers to evade trusttext config when restoring glossary entries
Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...
GHSA-2CJ2-QQXJ-5M3R Phusion Passenger denial of service
The http parser in Phusion Passenger 6.0.21 through 6.0.25 before 6.0.26 allows a denial of service during parsing of a request with an invalid HTTP method...
CGA-MXWX-MF8C-RF2M
Bulletin has no description...
CGA-C8G3-4HC3-WCJR
Bulletin has no description...
CVE-2023-52926
In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential use-after-free when the completion via iorwdone runs at separate...
MAL-2025-3010 Malicious code in transaction-analysis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 49ab525dda997f7abc07f4ef30a62443e40a0f01e218b74d6db9b378fe51f2a4 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
MAL-2025-2948 Malicious code in coingenerator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 78810d9638861bd92d3f96d7e29a552a41eb97b69b8deba84892cc7f458fb8c0 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
MAL-2025-3011 Malicious code in transaction-analyze (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 de16c0c85e09c235c78e898320412a3a2ae473c2ae91e939862b5e99fcb5950b Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
GHSA-V469-7WP6-7CVP Mattermost allows reading arbitrary files
Mattermost versions 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards...
CVE-2025-25604
Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the vifdisable function in mtkwifi.lua...
OSV-2025-149 UNKNOWN READ in processClientServerHello
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398049414 Crash type: UNKNOWN READ Crash state: processClientServerHello processTLSBlock ndpisearchtlsudp...
CVE-2024-49344
IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout...