13088 matches found
MAL-2025-2931 Malicious code in aiosignalasync (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5f77ce31a234eb422ebfaa8182ea066bd7c10c154bfefb76757b0c06bbd3e655 Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
MAL-2025-2937 Malicious code in asyncaiosignal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8c9a16c81ad4cb5cef1907d6b9e4b5b352d53a6918e702610b428a455e799a2f Infostealer with multiple possibilities, but not auto-activating on installation. There are already multiple attempts to publish it, with different...
RHSA-2025:1352 Red Hat Security Advisory: krb5 security update
Bulletin has no description...
CVE-2025-1198 Insufficient Session Expiration in GitLab
An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results...
CVE-2024-54951
Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...
SUSE: Security Advisory (SUSE-SU-2024:3251-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-RJFF-7JCH-VW6J
Bulletin has no description...
CGA-92RH-G2JC-P3WF
Bulletin has no description...
GHSA-29C6-3HCJ-89CF go-crypto-winnative BCryptGenerateSymmetricKey memory leak
Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...
GHSA-7G2V-JJ9Q-G3RG vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.2-rack, ruby3.4-rack, ruby3.4-rails, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.3-rack, ruby3.3-rails...
CGA-3487-J7M3-R87P
Bulletin has no description...
CVE-2024-10334
A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used. An attacker who successfully exploited the vulnerability could, in the worst case scenario, stop or manipulate the video feed. This issue affects System 800xA: 5.1.X; System 800xA:...
CVE-2025-0516 Incorrect Authorization in GitLab
Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...
CVE-2025-1212 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
CVE-2025-1042 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
CVE-2025-0376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page...
CVE-2025-1042 Files or Directories Accessible to External Parties in GitLab
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
Cross-site Scripting (XSS)
serialize-javascript is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization due to the failure to properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject and execute malicious code when deserializ...