13121 matches found
CVE-2024-48170
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via a crafted payload injected into the name in the profile.php...
Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-57000 vulnerabilities
Vulnerabilities for packages: kserve...
CGA-M5F6-J323-RQCV
Bulletin has no description...
GHSA-469F-WF4F-3JJV Magento Improper Access Control vulnerability
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain elevated...
GHSA-M4RG-MPP2-97PX Magento Stored Cross-Site Scripting (XSS) Vulnerability
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed...
CGA-9FWM-WMWP-WH5W
Bulletin has no description...
CGA-7W5P-69P3-FCWM
Bulletin has no description...
CVE-2025-24414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed...
CGA-GQJ9-25CQ-88W3
Bulletin has no description...
CVE-2025-24976 vulnerabilities
Vulnerabilities for packages: harbor-fips, kots, harbor, zot...
CGA-4FC4-GX3H-PR85
Bulletin has no description...
RHSA-2025:1255 Red Hat Security Advisory: doxygen security update
Bulletin has no description...
CGA-J9XF-GG8F-MR82
Bulletin has no description...
ALSA-2025:1329 Moderate: doxygen security update
Doxygen can generate an online class browser in HTML and/or a reference manual in LaTeX from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. Security Fixes:...
CVE-2025-25193 vulnerabilities
Vulnerabilities for packages: wildfly, celeborn, seata, zookeeper-fips...
GHSA-76P7-773F-R4Q5 vulnerabilities
Vulnerabilities for packages: arangodb, drupal, opensearch-dashboards, opensearch-dashboards-fips...
CVE-2025-25188 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy...